Configuring indices created by Metricbeat 7 or internal collection
Self-Managed
When monitoring using Metricbeat 7 or internal collection, data is stored in a set of indices called either:
.monitoring-{{product}}-7-mb-{{date}}, when using Metricbeat 7..monitoring-{{product}}-7-{{date}}, when using internal collection.
The settings and mappings for these indices are determined by legacy index templates named .monitoring-{{product}}.
You can retrieve these templates in Kibana. To manage index templates, go to the Index Management management page in the navigation menu or use the global search field, and then select Index Templates,
You can also use the Elasticsearch _template API:
GET /_template/.monitoring-*
To change the settings of the indices, add a custom index template. You can do that in Kibana, or using the Elasticsearch API:
- Set
index_patternsto match the.monitoring-{{product}}-7-*indices. - Set the template
orderto1. This ensures your template is applied after the default template, which has an order of 0. - Specify the
number_of_shardsand/ornumber_of_replicasin thesettingssection.
PUT /_template/custom_monitoring
{
"index_patterns": [".monitoring-beats-7-*", ".monitoring-es-7-*", ".monitoring-kibana-7-*", ".monitoring-logstash-7-*"],
"order": 1,
"settings": {
"number_of_shards": 5,
"number_of_replicas": 2
}
}
After changing the index template, the updated settings are only applied to new indices.