Symptoms

Adjust the retention configuration for specific statistics groups (such as HTTP or ASM).

Impact

No system impact

Conditions

User wants configure a different retention for each statistics index group, rather than using the same global retention for all statistic groups.

Workaround

None

Fix Information

For BIG-IQ 8.0 it is possible to configure a different retention for each index type. Generally all the statistics have the same retention that configured at: https://{BIG-IQ-IP}/ui/system/bigiq-data-collection/cluster/settings/statistics-collection/configure The retention can be configure for raw, hourly, daily, or monthly indexes or as we call them tl0,tl1,tl2,tl3 at elasticsearch db. the default is [tl0,tl1,tl2,tl3] = [PT10H, P7D, P31D, P365D] Lets say we want to configure a different retention for 2 statistics modules: http and asm. We first need to find out what is the group names of those modules (each group contains number of modules and the retention is configured per some group and not for some individual module). We first got to BIG-IQ CM console and send the following rest call: # curl -X GET localhost:8898/mgmt/ap/v1/platform-config/resources/dynamic_global_parameter/modules-group-retention-global-parameters | jq . | less { "kind": "dynamic_global_parameter", "ownerGroup": "appiq", "id": "modules-group-retention-global-parameters", "dependsOn": [], "state": "ACTIVE", "deploymentTarget": "any", "parameters": { "dos-detailed-group": { "name": "dos-detailed-group", "value": [ "", "", "", "" ] }, "afm-group": { "name": "afm-group", "value": [ "", "", "", "" ] }, "tcp-group": { "name": "tcp-group", "value": [ "", "", "", "" ] }, "asm-group": { "name": "asm-group", "value": [ "", "", "", "" ] }, . . . }, "dns-detailed-group": { "name": "dns-detailed-group", "value": [ "", "", "", "" ] }, "http-group": { "name": "http-group", "value": [ "", "", "", "" ] } }, "selfLink": "https://localhost/mgmt/ap/v1/platform-config/resources/dynamic_global_parameter/modules-group-retention-global-parameters" } We can see here the 2 group names that we would like to configure: "http-group" and "asm-group". We can see that each group has an array of size 4 - this is for the [tl0,tl1,tl2,tl3] different configuration - if it has empty string than the value is taken from the default configuration that configured at the UI (as explained above). Let's say we would like the configure for the http-group different retention for tl0 and tl1 and for asm-group a different retention for tl1 and tl2 - then we will send the following rest: curl -X PATCH localhost:8898/mgmt/ap/v1/platform-config/resources/dynamic_global_parameter/modules-group-retention-global-parameters -H 'Content-Type: application/json' -d ' { "kind": "dynamic_global_parameter", "ownerGroup": "appiq", "id": "modules-group-retention-global-parameters", "deploymentTarget": "any", "parameters": { "http-group": { "name": "http-group", "value": [ "PT24H", "P12D", "", "" ] }, "dos-group": { "name": "dos-group", "value": [ "", "P5D", "P62D", "" ] } } } ' Please note that the name of the group must appear twice - as the parameter name with the "name" inside.

Behavior Change