Controlling Elasticsearch Marvel Data Collection

This post is older than a year. Consider some information might not be accurate anymore.

Marvel is the monitoring plugin for Elasticsearch and Kibana. If you do maintenance in Elasticsearch, and therefore close indices, you might stumble over some ERROR messages in the elasticsearch log. (Update: elastic rebranded it as x-pack monitoring)

collector [index-recovery-collector] - failed collecting data
ClusterBlockException[blocked by: [FORBIDDEN/4/index closed]

In this case you can update the cluster settings, and tell marvel from which indices to collect data. You can explicitly include or exclude indices by prepending + to include the index, or - to exclude the index. Note the wildcard.

PUT _cluster/settings
{
  "transient": {
      "marvel.agent.indices" : ["dev,itu,etu,-prd*"]
  }
}

This should return the result:

{
  "acknowledged": true,
  "persistent": {},
  "transient": {
    "marvel": {
      "agent": {
        "indices": [
          "dev,itu,etu,-prd*"
        ]
      }
    }
  }
}