Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IQ AppIQ
Known Affected Versions:
7.0.0, 7.0.0.1, 7.0.0.2
Fixed In:
7.1.0
Opened: Apr 13, 2020 Severity: 3-Major
If you make changes to analytics retention configuration from the BIG-IQ user interface, the changes are not reflected at the database level, so BIG-IQ doesn't use the changes you made.
BIG-IQ does not behave as expected after the configuration changes. For example, if you changed the raw data retention from 10H to 20H, BIG-IQ might continue to retain the raw data at 10H.
When you make changes for the following analytics retention settings: keep real-time (raw) data up to: Keep hourly data up to: Keep daily data up to: Keep monthly data up to:
Change the ranalytics etention using the REST API. For example, to change the real-time (raw) retention then: 1. Get the current configuration of of the raw index(tl0) https://10.240.21.201/mgmt/ap/config/v1/platform-config/resources/a/es-index-statistics-tl0 2. From the returned JSON, find the retentionTime field. 3. Manually change the field to the desired value. 4. Send back the JSON with the changed value of retention using a PATCH to the same URL. If you want to change the retention for other fields: Keep hourly data up to: Keep daily data up to: Keep monthly data up to: Then change, respectively, the URL ending with: es-index-statistics-tl1 es-index-statistics-tl2 es-index-statistics-tl3
BIG-IQ now retains analytics retention changes you make from the user interface.