Delete index but it getting created again

Elastic Stack Elasticsearch
1

Hi Team,
I deleted a month older indexes but now i see it's getting created again. I believe filebeat maintains registry_file and was not expecting to re-send log data. Filbeat configuration are default, i configured prospectors only.

Please suggest how can i delete indexes, can i put logic in logstash conf to filter old file at all?

Month older log files still exists in the file system, that's another issue i am fixing now.

Thanks & Regards,
Piyush Tekade

2

The best way would be to have a conditional filter in your config to drop the data

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.