Page 1 of 1

NLS 2.1.7 - index for older logs get's closed every day

Posted: Fri Aug 14, 2020 12:44 am
by stooge
I recently ingested logs from June 8 into NLS 2.1.7. It's working out great and I'm getting everything I need out of it, however the index for June 8 get's closed about once every day and my dashboards fail to load. After I re-open the index everything starts working again, but in the logs I'm not seeing a reason for the index closing - just that it's closed. I would like to leave the index open until I close/delete it. Is there a setting I'm missing that can help me leave the index open?

Re: NLS 2.1.7 - index for older logs get's closed every day

Posted: Fri Aug 14, 2020 3:21 pm
by ssax
That is done based on the settings from Admin > Snapshots and Maintenance > Maintenance and Repository Settings.

You can increase it to a higher number but just remember the indices need to be open to query them which equals more memory usage.

The auto-closing is something you can enable to free up resources automatically, see here:

https://assets.nagios.com/downloads/nag ... enance.pdf

How long does the query go back?

Re: NLS 2.1.7 - index for older logs get's closed every day

Posted: Sat Aug 15, 2020 2:59 pm
by stooge
Thanks @ssax. I will be cleaning up my indexes and dashboards every week so the data won't stay in the repository for very long. I will make the change you mentioned and make sure it works

Re: NLS 2.1.7 - index for older logs get's closed every day

Posted: Mon Aug 17, 2020 2:45 pm
by benjaminsmith
Hi @stooge,

Great! Let us know if you have any other questions.