Docs
Elasticsearch Guide [8.1] » Monitor a cluster » Configuring indices for monitoring
« Collecting Elasticsearch log data with Filebeat Collecting monitoring data using legacy collectors »

Configuring indices for monitoring

Index templates are used to configure the indices that store the monitoring data collected from a cluster.

You can retrieve the templates through the _template API:

GET /_template/.monitoring-*

By default, the template configures one shard and one replica for the monitoring indices. To override the default settings, add your own template:

  1. Set the template patterns to match existing .monitoring-{product}-7-* indices.
  2. Set the template order to 1. This ensures your template is applied after the default template, which has an order of 0.
  3. Specify the number_of_shards and/or number_of_replicas in the settings section.

For example, the following template increases the number of shards to five and the number of replicas to two.

PUT /_template/custom_monitoring
{
  "index_patterns": [".monitoring-beats-7-*", ".monitoring-es-7-*", ".monitoring-kibana-7-*", ".monitoring-logstash-7-*"],
  "order": 1,
  "settings": {
    "number_of_shards": 5,
    "number_of_replicas": 2
  }
}

Only set the number_of_shards and number_of_replicas in the settings section. Overriding other monitoring template settings could cause your monitoring dashboards to stop working correctly.

« Collecting Elasticsearch log data with Filebeat Collecting monitoring data using legacy collectors »