elasticsearch - 如何在elasticsearch.yml中添加慢日志配置？

Question

在旧版本的elasticsearch中，慢速日志将在elasticsearch.yml中，但是
对于像5.1.1这样的新版本，我们必须添加类似slowlog的配置
index.search.slowlog.threshold.query.debug:0s
index.search.slowlog.threshold.fetch.debug:0s
index.indexing.slowlog.threshold.index.debug:0s

我尝试将这些配置添加到我的elasticsearch.yml中，当我启动elasticsearch服务时，它未启动会引发错误。

谁能帮我解决这个问题？

Answer 1

从Elasticsearch 5开始，慢速日志设置适用于每个索引。

您可以将设置放置到特定索引/ index_name / _settings

带有如下所示的有效负载。更多详细信息，请访问Elasticsearch Reference

{
"index.search.slowlog.threshold.query.warn": "10s",
"index.search.slowlog.threshold.query.info": "5s",
"index.search.slowlog.threshold.query.debug": "2s",
"index.search.slowlog.threshold.query.trace": "300ms",
"index.search.slowlog.threshold.fetch.warn": "1s",
"index.search.slowlog.threshold.fetch.info": "800ms",
"index.search.slowlog.threshold.fetch.debug": "500ms",
"index.search.slowlog.threshold.fetch.trace": "300ms",
"index.indexing.slowlog.threshold.index.warn": "10s",
"index.indexing.slowlog.threshold.index.info": "5s",
"index.indexing.slowlog.threshold.index.debug": "2s",
"index.indexing.slowlog.threshold.index.trace": "300ms",
"index.indexing.slowlog.level": "trace",
"index.indexing.slowlog.source": "1000"
}