From 16d94781967a96caf3afda24783ce6ee2c38ff5d Mon Sep 17 00:00:00 2001 From: weslambert Date: Fri, 10 Mar 2023 16:54:47 -0500 Subject: [PATCH] Add index lifecycle management policy definitions for default Elastic Agent data streams --- salt/elasticsearch/defaults.yaml | 209 +++++++++++++++++++++++++++++++ 1 file changed, 209 insertions(+) diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml index a0c431881..c4098e08c 100644 --- a/salt/elasticsearch/defaults.yaml +++ b/salt/elasticsearch/defaults.yaml @@ -84,6 +84,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -119,6 +138,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -154,6 +192,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -189,6 +246,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -224,6 +300,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -259,6 +354,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -294,6 +408,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -329,6 +462,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -364,6 +516,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -399,6 +570,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent @@ -434,6 +624,25 @@ elasticsearch: - "so-fleet_globals-1" - "so-fleet_agent_id_verification-1" priority: 200 + policy: + phases: + hot: + min_age: 0ms + actions: + set_priority: + priority: 100 + rollover: + max_age: 30d + max_primary_shard_size: 50gb + cold: + min_age: 30d + actions: + set_priority: + priority: 0 + delete: + min_age: 365d + actions: + delete: {} _meta: package: name: elastic_agent