NLS 2.1.7 - index for older logs get's closed every day

[stooge]

I recently ingested logs from June 8 into NLS 2.1.7. It's working out great and I'm getting everything I need out of it, however the index for June 8 get's closed about once every day and my dashboards fail to load. After I re-open the index everything starts working again, but in the logs I'm not seeing a reason for the index closing - just that it's closed. I would like to leave the index open until I close/delete it. Is there a setting I'm missing that can help me leave the index open?

[ssax]

That is done based on the settings from Admin > Snapshots and Maintenance > Maintenance and Repository Settings.

You can increase it to a higher number but just remember the indices need to be open to query them which equals more memory usage.

The auto-closing is something you can enable to free up resources automatically, see here:

https://assets.nagios.com/downloads/nag ... enance.pdf

How long does the query go back?

[stooge]

Thanks @ssax. I will be cleaning up my indexes and dashboards every week so the data won't stay in the repository for very long. I will make the change you mentioned and make sure it works

[benjaminsmith]

Hi @stooge,

Great! Let us know if you have any other questions.