Hi Team,
I set ISM policy to remove 3 day old indeces but polict removed all of the indeces without looking time of creation of indeces. I used ISM template like filebeat-tmb*
naming is like below;
filebeat-tmbtstweb01-7.12.1-2023.02.11
filebeat-tmbtstweb01-7.12.1-2023.02.12
filebeat-tmbtstweb01-7.12.1-2023.02.13 etc…
my ISM config;
{
“id”: “t”,
“seqNo”: 1396,
“primaryTerm”: 1,
“policy”: {
“policy_id”: “t”,
“description”: “test”,
“last_updated_time”: 1676296630643,
“schema_version”: 17,
“error_notification”: null,
“default_state”: “close”,
“states”: [
{
“name”: “close”,
“actions”: [
{
“retry”: {
“count”: 3,
“backoff”: “exponential”,
“delay”: “1m”
},
“close”: {}
}
],
“transitions”: [
{
“state_name”: “delete”,
“conditions”: {
“min_index_age”: “3d”
}
}
]
},
{
“name”: “delete”,
“actions”: [
{
“retry”: {
“count”: 3,
“backoff”: “exponential”,
“delay”: “1m”
},
“delete”: {}
}
],
“transitions”:
}
],
“ism_template”: [
{
“index_patterns”: [
“filebeat-tmb*”
],
“priority”: 100,
“last_updated_time”: 1650450452750
}
]
}
}
