Logstash is rotating and creating new indexes every day at 7pm, I want to shift this to 2am. Is there a way to do this?
Can you provide more context?
Are you creating daily indices using Logstash and have %{+YYYY.MM.dd} as part of your index name?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.