|
@@ -60,7 +60,7 @@ of each node in the warm tier:
|
|
|
+
|
|
|
[source,yaml]
|
|
|
----
|
|
|
-node.roles: [ "data_warm" ]
|
|
|
+node.roles: [ data_warm ]
|
|
|
----
|
|
|
|
|
|
* A host with the {agent} installed and configured to send logs to your {es}
|
|
@@ -82,8 +82,9 @@ To view the `logs` policy in {kib}:
|
|
|
The `logs` policy uses the recommended rollover defaults: Start writing to a new
|
|
|
index when the current write index reaches 50GB or becomes 30 days old.
|
|
|
|
|
|
-To view or change the rollover settings, click **Settings** for the hot phase.
|
|
|
-Then disable **Use recommended defaults** to display the rollover settings.
|
|
|
+To view or change the rollover settings, click **Advanced settings** for the hot
|
|
|
+phase. Then disable **Use recommended defaults** to display the rollover
|
|
|
+settings.
|
|
|
|
|
|
[role="screenshot"]
|
|
|
image::images/ilm/tutorial-ilm-hotphaserollover-default.png[View rollover defaults]
|
|
@@ -96,22 +97,27 @@ The default `logs` policy is designed to prevent the creation of many tiny daily
|
|
|
indices. You can modify the policy to meet your performance requirements and
|
|
|
manage resource usage.
|
|
|
|
|
|
-. Activate the warm phase and click **Settings**.
|
|
|
+. Activate the warm phase and click **Advanced settings**.
|
|
|
+
|
|
|
--
|
|
|
-.. Set **Move data into phase when** to **30 days**. This moves indices to the
|
|
|
-warm tier 30 days after rollover.
|
|
|
+.. Set **Move data into phase when** to **30 days old**. This moves indices to
|
|
|
+the warm tier 30 days after rollover.
|
|
|
|
|
|
-.. Enable **Replicas** and change **Number of replicas** to **1**.
|
|
|
+.. Enable **Set replicas** and change **Number of replicas** to **1**.
|
|
|
|
|
|
-.. Enable **Force merge** and set **Number of segments** to **1**.
|
|
|
+.. Enable **Force merge data** and set **Number of segments** to **1**.
|
|
|
|
|
|
[role="screenshot"]
|
|
|
image::images/ilm/tutorial-ilm-modify-default-warm-phase-rollover.png[Add a warm phase with custom settings]
|
|
|
--
|
|
|
|
|
|
-. Activate the delete phase and set **Move data into phase when** to **90**
|
|
|
-days. This deletes indices 90 days after rollover.
|
|
|
+. In the warm phase, click the trash icon to enable the delete phase.
|
|
|
++
|
|
|
+[role="screenshot"]
|
|
|
+image::images/ilm/tutorial-ilm-enable-delete-phase.png[Enable the delete phase]
|
|
|
++
|
|
|
+In the delete phase, set **Move data into phase when** to **90 days old**. This
|
|
|
+deletes indices 90 days after rollover.
|
|
|
+
|
|
|
[role="screenshot"]
|
|
|
image::images/ilm/tutorial-ilm-delete-rollover.png[Add a delete phase]
|