常用elk命令

问题参考文档 https://blog.csdn.net/qq_27818541/article/details/108758831

GET _search
{
  "query": {
    "match_all": {}
  }
}

DELETE /filebeat-index-list_pro-2022.09.25

GET /filebeat-7.10.0-2022.09.25-000001

#开启自动开关
PUT _cluster/settings
{
  "persistent": {
    "action.auto_create_index": "true" 
  }
}

trying to create too many buckets. must be less than or equal to: [100000] but was [100001]. this limit can be set by changing the [search.max_buckets] cluster level setting.

参考文章
https://blog.csdn.net/w903328615/article/details/121639056

PUT /_cluster/settings
{
  "persistent": {
    "search.max_buckets": 20000
  }
}