如何解决Elasticsearch Index Lifecycle Policy无法滚动的问题
为了评估其在日常运营中提供帮助的潜力,我已经部署了Elastic Search和Kibana(7.7.1,具有BASIC许可证),并为Ntopng(我们的监控平台)创建了索引模板。
由于索引持续增长,我想删除20天左右之前的Ntopng索引,因此我创建了一个名为ntopng的生命周期策略,其中带时间戳的索引应在1天后翻转(出于测试目的),然后将在过渡期2天后被删除:
接下来,我选择了当天创建的带有时间戳的索引,并将生命周期策略应用于该索引:
在此之前,我必须为该索引创建别名,所以我手动进行了此操作:
POST /_aliases
{
"actions" : [
{ "add" : { "index" : "ntopng-2020.09.09","alias" : "ntopng_Alias" } }
]
}
在那之后,一切都看起来不错(我想),因为未显示任何错误或警报:
"indices" : {
"ntopng-2020.09.09" : {
"index" : "ntopng-2020.09.09","managed" : true,"policy" : "ntopng","lifecycle_date_millis" : 1599609600433,"age" : "20.14h","phase" : "hot","phase_time_millis" : 1599681721821,"action" : "rollover","action_time_millis" : 1599680521920,"step" : "check-rollover-ready","step_time_millis" : 1599681721821,"is_auto_retryable_error" : true,"failed_step_retry_count" : 1,"phase_execution" : {
"policy" : "ntopng","phase_definition" : {
"min_age" : "0ms","actions" : {
"rollover" : {
"max_age" : "1d"
},"set_priority" : {
"priority" : 100
}
}
},"version" : 4,"modified_date_in_millis" : 1599509572867
}
}
我的期望是,该政策将在第二天自动滚动到下一个索引(ntopng-2020.10.10),以便在接下来的两天内最终删除初始索引。
相反,我遇到了以下错误:
GET ntopng-*/_ilm/explain
{
"indices" : {
"ntopng-2020.09.09" : {
"index" : "ntopng-2020.09.09","age" : "1.94d","phase_time_millis" : 1599776521822,"step" : "ERROR","step_time_millis" : 1599777121822,"failed_step" : "check-rollover-ready","failed_step_retry_count" : 80,"step_info" : {
"type" : "illegal_argument_exception","reason" : """index name [ntopng-2020.09.09] does not match pattern '^.*-\d+$'""","stack_trace" : """java.lang.IllegalArgumentException: index name [ntopng-2020.09.09] does not match pattern '^.*-\d+$'
at org.elasticsearch.action.admin.indices.rollover.TransportRolloverAction.generateRolloverIndexName(TransportRolloverAction.java:241)
at org.elasticsearch.action.admin.indices.rollover.TransportRolloverAction.masterOperation(TransportRolloverAction.java:133)
at org.elasticsearch.action.admin.indices.rollover.TransportRolloverAction.masterOperation(TransportRolloverAction.java:73)
at org.elasticsearch.action.support.master.TransportMasterNodeAction$AsyncSingleAction.lambda$doStart$3(TransportMasterNodeAction.java:170)
at org.elasticsearch.action.ActionRunnable$2.doRun(ActionRunnable.java:73)
at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37)
at org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(EsExecutors.java:225)
at org.elasticsearch.action.support.master.TransportMasterNodeAction$AsyncSingleAction.doStart(TransportMasterNodeAction.java:170)
at org.elasticsearch.action.support.master.TransportMasterNodeAction$AsyncSingleAction.start(TransportMasterNodeAction.java:133)
at org.elasticsearch.action.support.master.TransportMasterNodeAction.doExecute(TransportMasterNodeAction.java:110)
at org.elasticsearch.action.support.master.TransportMasterNodeAction.doExecute(TransportMasterNodeAction.java:59)
at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:153)
at org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.apply(SecurityActionFilter.java:123)
at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:151)
at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:129)
at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:64)
at org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:83)
at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:72)
at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:399)
at org.elasticsearch.xpack.core.ClientHelper.executeAsyncWithOrigin(ClientHelper.java:92)
at org.elasticsearch.xpack.core.ClientHelper.executeWithHeadersAsync(ClientHelper.java:155)
at org.elasticsearch.xpack.ilm.LifecyclePolicySecurityClient.doExecute(LifecyclePolicySecurityClient.java:51)
at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:399)
at org.elasticsearch.client.support.AbstractClient$IndicesAdmin.execute(AbstractClient.java:1234)
at org.elasticsearch.client.support.AbstractClient$IndicesAdmin.rolloverIndex(AbstractClient.java:1736)
at org.elasticsearch.xpack.core.ilm.WaitForRolloverReadyStep.evaluateCondition(WaitForRolloverReadyStep.java:127)
at org.elasticsearch.xpack.ilm.IndexLifecycleRunner.runPeriodicStep(IndexLifecycleRunner.java:173)
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggerPolicies(IndexLifecycleService.java:329)
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggered(IndexLifecycleService.java:267)
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine.notifyListeners(SchedulerEngine.java:183)
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine$ActiveSchedule.run(SchedulerEngine.java:211)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
at java.base/java.lang.Thread.run(Thread.java:832)
"""
},"modified_date_in_millis" : 1599509572867
}
}
"ntopng-2020.09.10" : {
"index" : "ntopng-2020.09.10","lifecycle_date_millis" : 1599696000991,"age" : "22.57h","phase_time_millis" : 1599776521844,"action_time_millis" : 1599696122033,"step_time_millis" : 1599777121839,"failed_step_retry_count" : 67,"reason" : "index.lifecycle.rollover_alias [ntopng_Alias] does not point to index [ntopng-2020.09.10]","stack_trace" : """java.lang.IllegalArgumentException: index.lifecycle.rollover_alias [ntopng_Alias] does not point to index [ntopng-2020.09.10]
at org.elasticsearch.xpack.core.ilm.WaitForRolloverReadyStep.evaluateCondition(WaitForRolloverReadyStep.java:104)
at org.elasticsearch.xpack.ilm.IndexLifecycleRunner.runPeriodicStep(IndexLifecycleRunner.java:173)
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggerPolicies(IndexLifecycleService.java:329)
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggered(IndexLifecycleService.java:267)
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine.notifyListeners(SchedulerEngine.java:183)
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine$ActiveSchedule.run(SchedulerEngine.java:211)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
at java.base/java.lang.Thread.run(Thread.java:832)
"""
},"set_priority" : {
"priority" : 100
}
}
}
第一个索引错误为“索引名称[ntopng-2020.09.09]与模式'^。*-\ d + $不匹配”
而第二个显示:“” index.lifecycle.rollover_alias [ntopng_Alias]不指向索引[ntopng-2020.09.10]“
请注意,我正在学习ES索引管理的基础知识,因此,不胜感激可能有什么问题的任何线索。
解决方法
好的,我刚刚发现索引名称必须以0001而不是2020.09.09这样的数字模式结尾,所以我可能需要寻找一种替代方法来使其工作。
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。