playbooks/roles/filebeat/templates/filebeat.yml

@@ -30,7 +30,11 @@ filebeat.config.modules:
   reload.enabled: false
 
 # ======================= Elasticsearch template setting =======================
-setup.ilm.enabled: false
+#[#1002043] 通过强制filebeat注册ilm策略方式，修订意外丢失的ilm策略
+setup.ilm.enabled: true
+setup.ilm.policy_name: "{{ logs[log_type]['setup_ilm_policy_name'] | default('gw-nginx-ug10') }}"
+setup.ilm.check_exists: true
+
 setup.template.name: "{{ logs[log_type]['template_name'] }}"
 setup.template.pattern: "{{ logs[log_type]['template_pattern'] }}"