How to Create a weekly index from filebeat and daily for Metricbeat

[Mai_Waly]

Hi All,

Could you please help in my logstash configuration

Currently we use daily indexes and cluster is block as we soon hit max number of shards

How to change logstash configuration to have a weekly filebeat index and a daily metricbeat index please.

[root@ies-logstash-do conf.d]# cat elasticsearch-output.conf
output {
  elasticsearch { hosts => ["esearch1:9200","esearch-02:9200","esearch-03:9200"]
   manage_template => false
   index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
  }
    stdout { codec => rubydebug }
}

Thanks,

Mai

[Rahul_Kumar4 (Rahul Kumar)]

See this - [Solved] Weekly indexes instead of daily