Suppose I'm creating the ES index using beat system or logstash with date time interpolation. how do I configure rolling over of index if size reaches at certain GBs in a single day? I did the following but I'm doing something wrong. I created an ILM and then an index template and linked the ILM…

It does not really work that way... either you are using ILM or date based rollover in filebeat with index names not both. The closest is to use ILM set Max Age 1d and a Max Shard Size.. that way it will either roll over 1 a day or or busier indices rollover at the shard size.

Index rollover issues

Elastic Stack Elasticsearch

warkolm (Mark Walkom) December 1, 2021, 11:41pm 2

Welcome to our community!

Please share your policy and index template.

1 Like

Topic		Replies	Views
Daily rollover with ILM Elasticsearch ilm-index-lifecycle-management	8	4539	August 28, 2019
Issue with index rollover via ILM Elasticsearch ilm-index-lifecycle-management	1	454	February 14, 2020
I just want a simple ILM rollover policy Elasticsearch ilm-index-lifecycle-management	3	18379	May 2, 2019
Index rollover is not happening Elasticsearch ilm-index-lifecycle-management	3	1127	August 15, 2020
Need to setup rollover on indexes in elasticsearch Elasticsearch ilm-index-lifecycle-management	1	385	August 6, 2020

Index rollover issues

Related topics