From 30ca92301cdf008c141eabe3dec6683614ed29ac Mon Sep 17 00:00:00 2001
From: pengln <pengln@amonstack.com>
Date: Tue, 15 Feb 2022 10:17:34 +0800
Subject: [PATCH] =?UTF-8?q?[#1002043]=20=E9=80=9A=E8=BF=87=E5=BC=BA?=
 =?UTF-8?q?=E5=88=B6filebeat=E6=B3=A8=E5=86=8Cilm=E7=AD=96=E7=95=A5?=
 =?UTF-8?q?=E6=96=B9=E5=BC=8F=EF=BC=8C=E4=BF=AE=E8=AE=A2=E6=84=8F=E5=A4=96?=
 =?UTF-8?q?=E4=B8=A2=E5=A4=B1=E7=9A=84ilm=E7=AD=96=E7=95=A5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 playbooks/roles/filebeat/templates/filebeat.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/playbooks/roles/filebeat/templates/filebeat.yml b/playbooks/roles/filebeat/templates/filebeat.yml
index 7d0b558..181ff72 100644
--- a/playbooks/roles/filebeat/templates/filebeat.yml
+++ b/playbooks/roles/filebeat/templates/filebeat.yml
@@ -30,7 +30,11 @@ filebeat.config.modules:
   reload.enabled: false
 
 # ======================= Elasticsearch template setting =======================
-setup.ilm.enabled: false
+#[#1002043] 通过强制filebeat注册ilm策略方式，修订意外丢失的ilm策略
+setup.ilm.enabled: true
+setup.ilm.policy_name: "{{ logs[log_type]['setup_ilm_policy_name'] | default('gw-nginx-ug10') }}"
+setup.ilm.check_exists: true
+
 setup.template.name: "{{ logs[log_type]['template_name'] }}"
 setup.template.pattern: "{{ logs[log_type]['template_pattern'] }}"