IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Collecting Elasticsearch log data with Filebeat Collecting monitoring data using legacy collectors »
Elastic Docs ›Elasticsearch Guide [8.6] ›Monitor a cluster

Configuring indices for monitoring

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Configuring indices for monitoring

edit

Index templates are used to configure the indices that store the monitoring data collected from a cluster.

You can retrieve the templates through the _template API:

GET /_index_template/.monitoring-es-mb*

By default, the template configures one shard and one replica for the monitoring indices. To override the default settings, add your own template:

  1. Set index_patterns to match existing .monitoring-{product}-8-* indices.
  2. Set the template priority to 1. This ensures your template is applied after the default template, which has an priority of 0.
  3. Specify the number_of_shards and/or number_of_replicas in the settings section.

For example, the following template increases the number of shards to five and the number of replicas to two.

PUT /_index_template/custom_monitoring
{
  "index_patterns": [
  ".monitoring-beats-8-*",
  ".monitoring-es-8-*",
  ".monitoring-kibana-8-*",
  ".monitoring-logstash-8-*"
  ],
  "priority": 1,
  "template": {
    "settings": {
      "number_of_shards": 5,
      "number_of_replicas": 2
    }
  }
}

Only set the number_of_shards and number_of_replicas in the settings section. Overriding other monitoring template settings could cause your monitoring dashboards to stop working correctly.

« Collecting Elasticsearch log data with Filebeat Collecting monitoring data using legacy collectors »