Curator should not run to delete indices at mid-night, avoiding conflicts when the initial set of new indices is created. We have experimented on large clusters moving that to 3:29 UTC to give time for new indicies. Without this fixed, as clusters scale up the number of indices they track, this can cripple the behavior of logging.
*** This bug has been marked as a duplicate of bug 1559168 ***
Reopening for 3.7 changes
3.7 cherrypick https://github.com/openshift/origin-aggregated-logging/pull/1038
The bug have been fixed in openshift-ansible v3.7.46. # oc get dc logging-curator -o json |grep -A 1 CURATOR_RUN_ "name": "CURATOR_RUN_HOUR", "value": "3" -- "name": "CURATOR_RUN_MINUTE", "value": "30" -- "name": "CURATOR_RUN_TIMEZONE", "value": "UTC"
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1576