How can I query all index rollover policy failure logs?

How can I query all index rollover failure logs?
I am trying with this query but it doesn’t return the expected logs -

GET .opendistro-ism-managed-index-history*/_search
{
“query”: {
“bool”: {
“must”: [
{
“term”: {
“managed_index_meta_data.action.failed”: {
“value”: true
}
}
},
{
“range”: {
“managed_index_meta_data.action.start_time”: {
“gte”: “now-365d”
}
}
}
]
}
},
“size”: 10000
}

By my test, I see the field managed_index_meta_data.info in the response of your query shows the error message, what do you want to see or is there no error showing in your case?

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.