如何在elasticsearch.yml中添加慢查询配置？

Question

在旧版本的elasticsearch中，慢日志将在elasticsearch.yml中，但对于5.1.1这样的新版本，我们必须添加类似慢日志的配置，如index.search.slowlog.threshold.query.debug: 0s index.search.slowlog.threshold.fetch.debug: 0s index.indexing.slowlog.threshold.index.debug: 0s

我尝试在我的elasticsearch.yml中添加这些配置，当我启动elasticsearch服务时，它没有启动，它抛出了一个错误。

有人能帮我解决这个问题吗？

Answer 1

从Elasticsearch 5开始，慢速日志设置适用于每个索引。

您可以将设置放入特定的索引/索引名称/设置

有效负载如下所示。欲了解更多详情，请访问Elasticsearch Reference。

{
"index.search.slowlog.threshold.query.warn": "10s",
"index.search.slowlog.threshold.query.info": "5s",
"index.search.slowlog.threshold.query.debug": "2s",
"index.search.slowlog.threshold.query.trace": "300ms",
"index.search.slowlog.threshold.fetch.warn": "1s",
"index.search.slowlog.threshold.fetch.info": "800ms",
"index.search.slowlog.threshold.fetch.debug": "500ms",
"index.search.slowlog.threshold.fetch.trace": "300ms",
"index.indexing.slowlog.threshold.index.warn": "10s",
"index.indexing.slowlog.threshold.index.info": "5s",
"index.indexing.slowlog.threshold.index.debug": "2s",
"index.indexing.slowlog.threshold.index.trace": "300ms",
"index.indexing.slowlog.level": "trace",
"index.indexing.slowlog.source": "1000"
}