How to limit logging to only 3 months

Craig2188 · October 22, 2020, 2:57pm

Hi,
I am trying to figure out how to limit the number of logs on Elastic/Kibana/Logstash to only hold 3 months worth of data. It is all installed on windows servers.

dadoonet · October 22, 2020, 3:09pm

I'd look at

Craig2188 · October 23, 2020, 9:55am

So, I create a new index lifecycle policy with Hot Phase set to index size 50GB, Max age 90 days, then enable the Delete phase and set that to 90 days from rollover? Then just apply that to the only policy that has a linked indices?

dadoonet · November 3, 2020, 4:17pm

I believe so. That should work.

system · December 1, 2020, 4:17pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.