Logstash is rotating and creating new indexes every day at 7pm, I want to shift this to 2am. Is there a way to do this?
Can you provide more context?
Are you creating daily indices using Logstash and have %{+YYYY.MM.dd} as part of your index name?
Logstash is rotating and creating new indexes every day at 7pm, I want to shift this to 2am. Is there a way to do this?
Can you provide more context?
Are you creating daily indices using Logstash and have %{+YYYY.MM.dd} as part of your index name?
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.