Clean logs after 7 days

Elastic Stack Elasticsearch
1

Hi,

I have installed EK on one server, Logstash on another server, Filebeat on destination server.

All server like File, Email, Web server logs are generated daily which are tailing using filebeat to logstash followed by elastic search.

After parsing logs from filebeat server to elastic search, after every 7 days i would like to archive logs to s3 from elastic search, how to achieve it ?

:slight_smile:

2

You need to start with the S3 Repository plugin. Its well documented on how to setup permissions and create the repository.

https://www.elastic.co/guide/en/elasticsearch/plugins/5.4/repository-s3.html

Once you get started you should checkout Curator to help automate the process. https://www.elastic.co/guide/en/elasticsearch/client/curator/current/index.html

Good Luck!!

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.