Elasticsearch indexes filling up the drive

Elastic Stack Elasticsearch
1

Hi All, what will be the best approach to implement policy where only last 3months of logs are being kept and analysed in the elasticsearch?
I'm currently testing curator- any advise on best approach?
Thanks a lot guys.

Cheers, Tomek

2

Curator is 100% the best option.

3

Thanks Mark, any recommendations on the commands I can use to keep logs for only certain time? I'm using curator version 3.5.1

Cheers, Tomek

4

https://www.elastic.co/guide/en/elasticsearch/client/curator/3.5/index.html is the best bet for that, I'd have to refer to it anyway :wink:

5

That's fine Mark, no probs, I will digest the document and try to figure out some commands,

Will share the most useful in this thread,

Cheers, Tomek