Date math expression for index pattern

Elastic Stack Beats
1

Hi Team,
Currently we have enabled weekly rollover for metricbeat, winlogbeat & logstash index. I have following 2 queries on ILM,

  1. From documentation, understood that Logstash uses Joda to format the index pattern from event timestamp & should be updated as "<indexName-{now/w{xxxx.ww}}>" to set weekly rollover. Is this applicable for other agents like metricbeat, heartbeat & winlogbeat and should be defined weekyear as "xxxx" instead of "yyyy"?

  2. Does it support to show only first date of the week as part of index pattern, e.g. indexName-2020-03-02 instead of indexName-2020-10? for weekly rollover?

Thanks,
Karthick

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.