Hi i try use logstash for my data with ILM policy.
Index rollover and create new index with template and so on. But the name of the index just increase a number but not wroks with date. Date is still the same.
Looks better, but I'm not going to desk check it here
Create the index, look at it in stack management (or GET), the setting provided_name needs to contain "-{now/d}-". If you look at your first one, it has the literal date.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.