I noticed something funny today. I converted one of our biggest indices (1TB daily) to a rollover policy finally, i named it “logs-00000001”, when the first roll-over came about after 100G of data I now see “logs-000002” (1 less 0), is this something configurable? I guess it doesn’t matter in the short term but it made me wonder, what happens at “logs-999999” ? does it start back at “logs-000001” ?
Thanks.
This is something Elasticsearch does natively, unrelated to ISM. You can also see by doing a quick test of creating test-01 and rolling it over manually and it’ll create a new index with test-00001
e.g.
{
"acknowledged" : true,
"shards_acknowledged" : true,
"old_index" : "testing-01",
"new_index" : "testing-000002",
"rolled_over" : true,
"dry_run" : false,
"conditions" : { }
}
As for what happens at 999999… I don’t know let’s see…
{
"acknowledged" : true,
"shards_acknowledged" : true,
"old_index" : "rollover-999997",
"new_index" : "rollover-999998",
"rolled_over" : true,
"dry_run" : false,
"conditions" : { }
}
{
"acknowledged" : true,
"shards_acknowledged" : true,
"old_index" : "rollover-999998",
"new_index" : "rollover-999999",
"rolled_over" : true,
"dry_run" : false,
"conditions" : { }
}
{
"acknowledged" : true,
"shards_acknowledged" : true,
"old_index" : "rollover-999999",
"new_index" : "rollover-1000000",
"rolled_over" : true,
"dry_run" : false,
"conditions" : { }
}
{
"acknowledged" : true,
"shards_acknowledged" : true,
"old_index" : "rollover-1000000",
"new_index" : "rollover-1000001",
"rolled_over" : true,
"dry_run" : false,
"conditions" : { }
}
Seems like it will just keep increasing.
1 Like