Index name conventions

Elastic Stack Elasticsearch
1

Hi all, can anyone tell me why elastcisearch always add the date in the index name, is there any performance reason or is only because they like

Regards

2

That's not Elasticsearch, it'd be the client that is requesting the index to be created, eg Logstash.

It's done for a few reasons;

  1. Index management, so you can delete data after a given date. Deleting an index is much easier than deleting many documents in an index.
  2. (In the past) When you made a query with a date range, Elasticsearch and Kibana used to use the date in the index name (if it had one) to only query the exact index range it needed.
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.