Does single node Elasticsearch supports ILM ploicy

[stephenb (Stephen Brown)]

Hi @Ravi_Pattar

I can not keep up with all your questions on this Topic. You need to read / learn our documentation, concepts etc...

@Ravi_Pattar

GET /filebeat-8.10.4-2024.01.12

{
  "filebeat-8.10.4-2024.01.12" : {

@Ravi_Pattar

GET /filebeat-8.11.2-2024.01.12

{
  "filebeat-8.11.2-2024.01.12" : {

Those are daily indices and thus NOT under ILM... With rollover

@Ravi_Pattar

GET /<filebeat-7.17.15>

{
  "filebeat-7.17.15-2024.01.05-000003" : {
    "aliases" : {
      "filebeat-7.17.15" : {
        "is_write_index" : false
      }

so, in these conditions mentioned above for index 8.10 and 8.11. How to handle when it comes to rollover e.g. POST filebeat-7.17.3/_rollover

You can attempt to run

POST filebeat-7.17.5/_rollover

And 8.x Elastic Handles all this slightly different with Datastreams and if you are mizxing 7.x and 8.x Beats vs Logstash vs Elasticsearch you may have issues...

If you use 8.x Elasticsearch and Logstash you will need to use the output config shown on this page....

And learn about datastreams which in. 8.x replaces much of what we have discussed in this topic

Data streams | Elasticsearch Guide [8.12] | Elastic

Heads up I will not be answering more question on this topic... .

If you have new specific questions please open new specific questions

[Ravi_Pattar]

@stephenb

If you have new specific questions please open new specific questions

Hi Stephen,

Sure, will do.

Thanks,