Elasticsearch——Rollover的正确使用姿势

# kibana-Index Management页面报错
Index lifecycle error
illegal_argument_exception: index.lifecycle.rollover_alias [niosec-endpointsecurity-huorong-all] does not point to index [niosec-endpointsecurity-huorong-prod]

Index lifecycle error
illegal_argument_exception: index.lifecycle.rollover_alias [niosec-endpointsecurity-huorong-prod] does not point to index [niosec-endpointsecurity-huorong-prod]

# 创建索引并指定lifecycle与aliases属性
PUT my-index-000001
{
  "settings": {
    "index.lifecycle.name": "my_policy",
    "index.lifecycle.rollover_alias": "my_data"
  },
  "aliases": {
    "my_data": {
      "is_write_index": true
    }
  }
}
# 返回
{
  "acknowledged" : true,
  "shards_acknowledged" : true,
  "index" : "my-index-000001"
}

POST _reindex
{
  "source": {
    "index": "xxxxxx"
  },
  "dest": {
    "index": "xxxxxx-000001"
  }
}
# 对其设置lifecycle属性
PUT xxxxxx-000001/_settings
{
  "index.lifecycle.name": "my_policy",
  "index.lifecycle.rollover_alias": "my_data"
}
# 对其添加aliases
PUT xxxxxx-000001/_aliases/my_data
{
    "is_write_index": true
}

PUT _ilm/policy/my_policy/
{
  "policy": {
    "phases": {
      "hot": {
        "actions": {
          "rollover" : {
            "max_primary_shard_size": "50GB"
          }
        }
      }
    }
  }
}

# 写入一条数据
PUT my-index-000001/_doc/1
{
  "name": "weldon",
  "address": "陕西省西安市"
}
# 返回
{
  "_index" : "my-index-000001",
  "_type" : "_doc",
  "_id" : "1",
  "_version" : 1,
  "result" : "created",
  "_shards" : {
    "total" : 2,
    "successful" : 2,
    "failed" : 0
  },
  "_seq_no" : 0,
  "_primary_term" : 1
}

# 验证当前索引设置、alias指向
GET _cat/indices/my-index*?v
GET my-index-000001/_settings
GET my-index-000001/_alias
GET _alias/my_data
# 返回见下图

# 执行rollover apiapi，我这里max_docs指定的是1哦（因为我只写入了1条数据），如果指定为2则不满足rollover条件，conditions返回就为false
POST my_data/_rollover
{
  "conditions": {
    "max_docs": 1
  }
}
# 返回
{
  "acknowledged" : true,
  "shards_acknowledged" : true,
  "old_index" : "my-index-000001",
  "new_index" : "my-index-000002",
  "rolled_over" : true,
  "dry_run" : false,
  "conditions" : {
    "[max_docs: 1]" : true
  }
}