Can I change Index "creation_date"?

Elastic Stack Elasticsearch
1

"index001_20180918": {
"state": "open",
"settings": {
"index": {
"routing": {
"allocation": {
"require": {
"box_type": "hot"
}
}
},
"number_of_shards": "1",
"provided_name": "index001_20180918",
"creation_date": "1537232141670",
"number_of_replicas": "0",
"uuid": "k_gPxxk6Sq-mp19GSUubOA",
"version": {
"created": "6000099"
}
}

Based on "creation_date" info, the index was created on "09/18/2018 AM12:55:41.670" (UTC) which seems ok, but my system is located in South Korea which uses "Asia/Seoul" timezone (UTC+9hours).

How can i change "creation_date" timezone so the index will be created +9hours later than the current?

FIY, currently the index creates at 9am instead of 12am, but i need to move the index from hot to warm node at 1am everyday.

Please advise.

2

Elasticsearch stores everything in UTC, so you cannot change that.

That's the time that something asked Elasticsearch to create the index, Elasticsearch didn't just create one itself.

3

[from my Logstash]
...
output {
elasticsearch {
hosts => ["els-01:9200","els-02:9200"]
index => "index001_{+YYYYMMdd}"
}
}

Yes, Logstash output set as elasticsearch to create indices with YYYYMMdd format. Should i change "@timestamp" timezone then???

Thank you!

4

Definitely.

5

Thank you for all your quick replies! :slight_smile:

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.