Marvel indices

Marvel stores it’s data using time based indices. By default, Marvel generates an index per day, with one shard and one replica. We expect this to be a good default which will fit most use cases. You may need to change it for very big installations.

Configuring Marvel’s indices

edit

Marvel uses an index template to preconfigure newly created indices. You can retrieve it with:

GET /_template/marvel

To change the default settings, you may add your own template to override it. Make sure your template uses the .marvel-* matching pattern and has an order of 1 or higher. For example, this template will increase the number of shards to 5:

PUT /_template/custom_marvel
{
    "template": ".marvel*",
    "order": 1,
    "settings": {
        "number_of_shards": 5
    }
}

We recommend only changing the settings section. Other sections are important for the correct operation of the dashboards.

For reference, here is the settings section of the default template:

{
    "template": ".marvel*",
    "settings": {
        "number_of_shards": 1,
        "number_of_replicas": 1,
        "analysis": {
            "analyzer": {
                "default": {
                    "type": "standard",
                    "stopwords": "_none_"
                }
            }
        },
        "mapper.dynamic": true,
        "marvel.index_format": 1
    }
    .....
}

« Statistics exporting Other relevant Elasticsearch settings »