I have configured an ELK Cluster with 5 nodes, one being master and the other slaves. I index logs in the cluster once a day using logstash. I use a CronJOB (script) to copy the log files to the configured logstash directory. I have also manually set a .sincedb path for logstash. However, a tricky …

No. Only audit logging would do that, and that I believe is a commercial feature. But if you secure the cluster and the deleting stops you might be able to conclude that something was deleting it.

Discuss the Elastic Stack

ElasticSearch deletes documents in an index automatically

Elastic Stack Elasticsearch

Topic		Replies	Views
Elasticsearch indices gets deleted automatically periodically Elasticsearch	3	3268	February 14, 2017
Doc's are getting deleted automatically Elasticsearch	13	1567	August 8, 2018
Lost all index suddenly Elasticsearch	23	6769	February 20, 2017
Elastic search Delete API Elasticsearch	7	531	July 17, 2018
How to monitor cause of deletion of documents in index? Elasticsearch	4	367	November 16, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

ElasticSearch deletes documents in an index automatically

Related topics