How to Create a weekly index from filebeat and daily for Metricbeat

Elastic Stack Logstash
1

Hi All,

Could you please help in my logstash configuration

Currently we use daily indexes and cluster is block as we soon hit max number of shards

How to change logstash configuration to have a weekly filebeat index and a daily metricbeat index please.

[root@ies-logstash-do conf.d]# cat elasticsearch-output.conf
output {
  elasticsearch { hosts => ["esearch1:9200","esearch-02:9200","esearch-03:9200"]
   manage_template => false
   index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
  }
    stdout { codec => rubydebug }
}

Thanks,

Mai

2

See this - [Solved] Weekly indexes instead of daily

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.