Skip to content

Instantly share code, notes, and snippets.

PUT _ilm/policy/web_rollover
{
  "policy": {
    "phases": {
      "hot": {                      
        "actions": {
          "rollover": {
 "max_docs": 2
@TomonoriSoejima
TomonoriSoejima / .gitignore.md
Last active June 14, 2020 11:59
.gitignore sample
elasticsearch/*
!elasticsearch/config
!elasticsearch/config/*

kibana/*
!kibana/config
!kibana/config/*
@TomonoriSoejima
TomonoriSoejima / bool_query.md
Last active November 2, 2021 16:13
role test.md
POST /_security/role/access_role_1
{
    "indices" : [
      {
        "names" : [
          "test"
        ],
        "privileges" : [
 "read"
PUT /_cluster/settings
{
    "persistent" : {
        "indices.lifecycle.poll_interval": "5s"
    }
}


PUT _ilm/policy/ipfix_rollover

find logstash-7.[456].0/vendor/bundle | grep Gemfile | awk -F '/' '{print $1, $7 }' | sort -k2

cat Watcher_Stats.json | jq '.stats | sort_by(.watch_count) | reverse' | head -30

[ { "health" : "yellow", "status" : "open", "index" : "das", "uuid" : "f_5xYiYlQT2_YsgSYW6hYQ", "pri" : "5", "rep" : "1", "docs.count" : "0", "docs.deleted" : "0",

@TomonoriSoejima
TomonoriSoejima / rollover_test.md
Last active November 6, 2020 12:26
rollover test
DELETE hotel*


PUT /_cluster/settings
{
    "persistent" : {
        "indices.lifecycle.poll_interval" : "10s"
    }
}

Keybase proof

I hereby claim:

  • I am tomonorisoejima on github.
  • I am tomonos (https://keybase.io/tomonos) on keybase.
  • I have a public key ASBqi2-gxBGgMzxLFij0102kd6F4NL3BLLY7o4Qz5IjHCgo

To claim this, I am signing this object: