麋鹿日志存放滚转指数没有代表碎片

Question

我用麋鹿。并且我的日志存储启用了rollover.index模板5 pri碎片1代表碎片。但只有当前索引有rep碎片，旧索引只有pri碎片。如何使旧索引也有5个pri碎片和1个rep碎片？

# GET /_cat/indices?v
health status index                               uuid                   pri rep docs.count docs.deleted store.size pri.store.size
green  open   cloud-logs-2022.03.02-000046        ycvYYKEtRZSJxR8wwdJlqQ   5   0  128888646            0     52.1gb         52.1gb
green  open   cloud-logs-2022.03.02-000047        JclF5gpoTxKvBpPuTuy-jQ   5   1   42849847            0     37.3gb         18.6gb

# GET /_template
{
"cloud-log": {
        "order": 1,
        "index_patterns": [
            "cloud-logs-*"
        ],
        "settings": {
            "index": {
                "lifecycle": {
                    "name": "logstash-policy",
                    "rollover_alias": "cloud-logs"
                },
                "codec": "best_compression",
                "mapping": {
                    "total_fields": {
                        "limit": "10000"
                    }
                },
                "refresh_interval": "30s",
                "number_of_shards": "5",
                "query": {},
                "number_of_routing_shards": "30",
                "number_of_replicas": "1"
            }
        },
        "mappings": {},
        "aliases": {}
    }
}

Answer 1

控制logstash-policy索引生命周期的cloud-logs-* ILM策略可能会指出，当索引翻转时，副本碎片的数量应该从1减少到0。

您可以在Kibana > Stack management > Index生命周期策略中直接更改这一点。