Elasticsearch snapshot retention behavior

Lets say we create daily indices with ILM policy that delete data after 1 year. And lets say we have SLM that have retention period of 30 days. So, eventually what will be the content of snapshot after 1 year. Is it one year data or it will have only 30days data?

Welcome to our community! :smiley:

SLM will have the last 30 days of data.

1 Like

Each snapshot created by SLM will have the full set of indices in the cluster at the time it is taken, which would be 1 years worth of data.

1 Like

Ahh yeah good point, I missed that :joy:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.