Been reading through old questions and seem to be getting some conflicting results about rolling of indexes. I'm using v7.4.2 for my Filebeat => Logstash => Elasticsearch => Kibana stack. I'm still a newbie and am hoping for a definitive answer to this question if possible:
Do I need to have a cron job that rolls the index daily or is there something within ES that can do this without cron?
I have an ILM Policy with rules of 20Gb / 1d. I'm unsure if this should be rolling the indexes (seems not because it isn't) or if the rollover API needs to be called by something like cron and will roll the index if either of those two conditions have been met/exceeded.
Please save my sanity.....