I was wondering if someone can tell me where can I specify number of shards and ILM policy for specific data stream while using Elastic Agents.
For example the default sys log data streams all use "Logs" as a default ILM policy and have one primary shard.
Where can I specify these configs and how would it look like before the data streams are already created?
You need to follow this documentation here to create custom template, but to do that you would need to clone the current data stream template, so I don't think you can't do that before creating the data streams.
Depending on the integration you will need to create a custom template for every dataset that the integration have, which is a lot of work.
I opened an issue for a feature request to simplify this process and it seems that Elastic is working on it.
I thought there would be an easier way to do that, but I guess there are still a lot of restrains while using Elastic Agents.
I will keep an eye on the mentioned issue.
Yeah, anything that you need to customize will give you some more work.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.