ROLLUP_NO_MATCHING_INDICES elasticsearch config_error ai_generated true

ElasticsearchException: 汇总作业[my_rollup]无法启动,因为索引模式[logs-*]不匹配任何现有索引

ElasticsearchException: Rollup job [my_rollup] cannot be started because the index pattern [logs-*] does not match any existing indices

ID: elasticsearch/rollup-job-not-matching-indices

其他格式: JSON · Markdown 中文 · English
82%修复率
83%置信度
1证据数
2024-04-05首次发现

版本兼容性

版本状态引入弃用备注
Elasticsearch 7.13 active — — —
Elasticsearch 8.3 active — — —
Elasticsearch 8.12 active — — —

根因分析

汇总作业的索引模式不匹配集群中的任何索引,阻止作业初始化。

English

The rollup job's index pattern does not match any indices in the cluster, preventing job initialization.

generic

官方文档

https://www.elastic.co/guide/en/elasticsearch/reference/current/rollup-getting-started.html

解决方案

  1. 使用`GET _cat/indices/logs-*`验证现有索引,并调整汇总作业模式以匹配:`PUT _rollup/job/my_rollup/_stop`然后`PUT _rollup/job/my_rollup {"index_pattern": "logs-2025-*"}`
  2. 在启动作业前创建匹配模式的示例数据索引:`POST logs-2025-01/_doc {"timestamp": "2025-01-01", "value": 10}`

无效尝试

常见但无效的做法:

  1. Creating an empty index matching the pattern (e.g., `PUT logs-2025`) without data 60% 失败

    The rollup job may start but will produce no results, and the empty index may cause other issues.

  2. Modifying the rollup job to use a wildcard pattern like `*` 70% 失败

    This may match unintended indices, causing performance degradation or incorrect rollups.

  3. Restarting the rollup job without checking index existence 90% 失败

    The same error will recur as the index pattern remains unmatched.