How to limit logging to only 3 months

Elastic Stack Elasticsearch
1

Hi,
I am trying to figure out how to limit the number of logs on Elastic/Kibana/Logstash to only hold 3 months worth of data. It is all installed on windows servers.

2

I'd look at

3

So, I create a new index lifecycle policy with Hot Phase set to index size 50GB, Max age 90 days, then enable the Delete phase and set that to 90 days from rollover? Then just apply that to the only policy that has a linked indices?

image
image893×329 22.5 KB

4

I believe so. That should work.