# Data stream with "managed" tag

**URL:** <https://discuss.elastic.co/t/data-stream-with-managed-tag/364209>\
**Category:** Elasticsearch\
**Created:** [August 1, 2024, 2:16pm UTC](https://discuss.elastic.co/t/data-stream-with-managed-tag/364209 "2024-08-01T14:16:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![juancamiloll](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/32/110326_2.png) [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Post date:** [August 1, 2024, 2:16pm UTC](https://discuss.elastic.co/t/data-stream-with-managed-tag/364209/1 "2024-08-01T14:16:52Z")

</div>

Hello everyone,

thanks in advance to anyone who can solve my doubt.

Could someone explain me what is the difference between the data streams that have the "Managed" tag and the ones that don't have it. How can I remove it?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/1/013a52a5ccc28c1e5da97123a1385f6b4e0e696a.png)

**.conf output**

```auto
  if [type] == "deepsecurity"
   {
       elasticsearch {
       id => "10402_output_deepsecurity"
       hosts => ["https://myhost:9200"]
       data_stream => true
       data_stream_type => "logs"
       data_stream_dataset => "deep"
       data_stream_namespace => "produccion"
       user => "myuser"
       password => "mypassword"
       ssl_enabled => true
       ssl_certificate_authorities => "/etc/logstash/certs/certificado-ca.crt"
    }
  }
}

```

Policy

```auto
PUT /_ilm/policy/deep-index-policy
{
  "policy": {
    "phases": {
      "hot": {
        "min_age": "0ms",
        "actions": {
          "rollover": {
            "max_size": "30MB"
          }
        }
      },
      "delete": {
        "min_age": "90d",
        "actions": {
          "delete": {}
        }
      }
    }
  }
}

```

Index Template

```auto
PUT _index_template/deep-index-template
{
  "template": {
    "settings": {
      "index": {
        "lifecycle": {
          "name": "deep-index-policy",
          "rollover_alias": "deep"
        }
      }
    }
  },
  "index_patterns": [
    "deep-*"
  ],
  "data_stream": {},
  "priority": 200
}

```

---

<div class="post-metadata">

**Author:** ![nfeekery](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nfeekery/32/117349_2.png) [@nfeekery](https://discuss.elastic.co/u/nfeekery)\
**Post date:** [August 2, 2024, 8:32am UTC](https://discuss.elastic.co/t/data-stream-with-managed-tag/364209/2 "2024-08-02T08:32:11Z")

</div>

Category updated on August 2, 2024, 8:32am UTC

From #Elastic Search to #Elasticsearch

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 30, 2024, 8:32am UTC](https://discuss.elastic.co/t/data-stream-with-managed-tag/364209/3 "2024-08-30T08:32:43Z")

</div>

Closed on August 30, 2024, 8:32am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.