IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Collecting Elasticsearch log data with Filebeat Collecting monitoring data using legacy collectors »
Elastic Docs ›Elasticsearch Guide [8.3] ›Monitor a cluster

Configuring indices for monitoring

edit

Configuring indices for monitoring

edit

Index templates are used to configure the indices that store the monitoring data collected from a cluster.

You can retrieve the templates through the _template API:

GET /_template/.monitoring-*

By default, the template configures one shard and one replica for the monitoring indices. To override the default settings, add your own template:

  1. Set the template patterns to match existing .monitoring-{product}-7-* indices.
  2. Set the template order to 1. This ensures your template is applied after the default template, which has an order of 0.
  3. Specify the number_of_shards and/or number_of_replicas in the settings section.

For example, the following template increases the number of shards to five and the number of replicas to two.

PUT /_template/custom_monitoring
{
  "index_patterns": [".monitoring-beats-7-*", ".monitoring-es-7-*", ".monitoring-kibana-7-*", ".monitoring-logstash-7-*"],
  "order": 1,
  "settings": {
    "number_of_shards": 5,
    "number_of_replicas": 2
  }
}

Only set the number_of_shards and number_of_replicas in the settings section. Overriding other monitoring template settings could cause your monitoring dashboards to stop working correctly.

« Collecting Elasticsearch log data with Filebeat Collecting monitoring data using legacy collectors »