Elastic Agent, specifying number of shards and ILM policy

Elastic Stack Elastic Agent
1

Hello!

I was wondering if someone can tell me where can I specify number of shards and ILM policy for specific data stream while using Elastic Agents.

For example the default sys log data streams all use "Logs" as a default ILM policy and have one primary shard.

Where can I specify these configs and how would it look like before the data streams are already created?

Thank you!

2

You need to follow this documentation here to create custom template, but to do that you would need to clone the current data stream template, so I don't think you can't do that before creating the data streams.

Depending on the integration you will need to create a custom template for every dataset that the integration have, which is a lot of work.

I opened an issue for a feature request to simplify this process and it seems that Elastic is working on it.

1 Like
3

Thank you!

I thought there would be an easier way to do that, but I guess there are still a lot of restrains while using Elastic Agents.

I will keep an eye on the mentioned issue.

4

Yeah, anything that you need to customize will give you some more work.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.