Data stream timestamp in the name of index

Elastic Stack Elasticsearch
1

Hi
Is it possible to achieve name with timestamp from ingest data to elasticsearch in the index name like

.ds-<data-stream>-<yyyy.MM.dd>-<generation>

.ds-<data-stream><mytimestamp_from_log>-<generation>

I've tried to make by


  "data_stream": {
    "hidden": false,
    "allow_custom_routing": false,
	"timestamp_field": "@timestamp"
  },

But it doesn't work. I didn't find any solution in docs but something on Fix the timestamp field of a data stream to @timestamp (#59076) · elastic/elasticsearch@cb6b05d · GitHub

2

No yhat is not possible. With data streams all indexed data goes into a single backing index at any point in time.

Why do you need this?

If you want this behaviour, then use traditional time- based indices with the date in the index name instead of data streams.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.