Index alias with sliding time window

Elastic Stack Elasticsearch
1

Hi,

when using ELK with standard configuration an new logstash index is created
every day.
Is there a possibility to create an alias, say "last-week" which always
covers the last 7 days?

I found several places within the ES docs where aliases like "last_3_month"
or "current_day" are used in index templates.
But I don't get how to you use these for a sliding time window.

Thanks in advance,
Görge

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/daef90c2-cad2-4387-9c0b-359fbb6794bf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

You just need to add them yourself, it's not an automatic process.

Use something like Elasticsearch Curator (
GitHub - elastic/curator: Curator: Tending your Elasticsearch indices).

On 23 March 2015 at 23:57, Görge Albrecht goerge.albrecht@gmail.com wrote:

Hi,

when using ELK with standard configuration an new logstash index is
created every day.
Is there a possibility to create an alias, say "last-week" which always
covers the last 7 days?

I found several places within the ES docs where aliases like
"last_3_month" or "current_day" are used in index templates.
But I don't get how to you use these for a sliding time window.

Thanks in advance,
Görge

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/daef90c2-cad2-4387-9c0b-359fbb6794bf%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/daef90c2-cad2-4387-9c0b-359fbb6794bf%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-bv7oStPCOiG2G9TUJq-h2x-_av-%3DBeF_-b9aWUJQdaw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.