Create ILM Policy from Logstash when does not exist

Elastic Stack Logstash
1

Hi there,

I was wondering if it is possible to create an ilm policy automatically in a logstash pipeline. My use case:

I collect logs from an kubernetes cluster and create indices based on the applications for example:

filebeat-%{[kubernetes][labels][app]}

Since I never know (and I don't want to know) if a new application was deployed to kubernetes I would like to be able to automatically create a new ILM policy so the developers can adjust it for their logs when they want to. Otherwise I always need to create a policy first.

Is it possible?

Thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.