playbooks/roles/filebeat/templates/filebeat.yml

@@ -42,9 +42,9 @@ filebeat.config.modules:
 # ======================= Elasticsearch template setting =======================
 #[#1002043] 通过强制filebeat注册ilm策略方式，修订意外丢失的ilm策略。
 #如果filebaet_ilm_enabled被设置为false则禁止ilm，这是为了兼容华为云的ES
-setup.ilm.enabled: false
+setup.ilm.enabled: {{ logs[log_type]['filebaet_ilm_enabled'] }}
 setup.ilm.policy_name: "{{ logs[log_type]['setup_ilm_policy_name'] | default('gw-nginx-ug10') }}"
-setup.ilm.check_exists: false
+setup.ilm.check_exists: true
 
 setup.template.name: "{{ logs[log_type]['template_name'] }}"
 setup.template.pattern: "{{ logs[log_type]['template_pattern'] }}"