Hello
Could you please help me to understand better rollover function ?
-
I set up police in Kibana
like hot 7 days, warm .. that should be 27 days and after delete -
Logstash output
output { elasticsearch { hosts =>["elkstack:9000"] index => "apptest" ilm_enabled => true ilm_rollover_alias => "approllover" ilm_pattern => "000002" ilm_policy => "mypolicy" } }
In KIbana apear just "approllover" but I would like that I have my index -> "apptest" and after hot (7 days ) should rollover to "approllover"