I am relatively new to ELK and have noticed that our server isn't deleting old Logstash indexes.
If I need to create a Lifecycle policy I can't seem to find instructions for doing that with these records.
If I attempt to create an Index Template, the associated index appears to stop working correctly.
Any help would be appreciated.
If you aren't using ILM, it may be easier to use the old Curator methods. It lets you mange indices by age and the process can be scheduled with cron.
It was my understanding that Curator was deprecated.
I haven't found any documentation on how to create an ILM for logstash indexes that are being created without a template.
Is that possible? It seems like it should be.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.