How to determine the Oldest data age of each index (Hot,Cold,Archive)

[ranamehboob]

Hi Community,

Hope you are doing well.

We have set the retention of each index for 1 year. (6 months data is searchable (Hot Mount or Cold Mount) and 6 months data is frozen (Archive Mount)) due to our compliance.

Now i need to identify the Oldest data age for each index Hot Warm and Frozen.

is the data bucket is present for one year or not in our mounts points ? 

Share the command to identify the buckets age for each index

Regards,

Mehboob

[isoutamo]

Hi

the easiest way is look from MC (monitoring console). You could found it from Settings -> Monitoring Console. There select Indexing -> Indexes and Volumes -> Index details: Deployment

It gives you a dashboard where is Earliest and Latest Event information. Then under Earliest value is magnifying class which you should click to get SPL which have generate that value. 

When you want to get that value based on bucket type (warm, cold) you must update that query to calculate those values by fields: bucket_dirs.home.event_min_time and minTime (this should be cold bucket time).

r. Ismo