# Is my data stream not rolling over to a new index like it's supposed to?

**URL:** <https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515>\
**Category:** Elasticsearch\
**Tags:** datastreams\
**Created:** [October 24, 2021, 6:02pm UTC](https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515 "2021-10-24T18:02:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nsouth](https://avatars.discourse-cdn.com/v4/letter/n/ecccb3/32.png) [@nsouth](https://discuss.elastic.co/u/nsouth)\
**Post date:** [October 24, 2021, 6:02pm UTC](https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515/1 "2021-10-24T18:02:41Z")

</div>

We have a data stream created by Logstash and it's using the default index template and ILM policy. My understanding is that the data stream should roll over to a new index once the initial index has 50 GB of data or is 30 day sold. However, there's only one index and it's over 51 GB (Update: now over 55 GB). Shouldn't it have rolled over by now? Thanks for the help.  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/8/b82d4cf1992ea6ad597091a1e279f292fef17493.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 25, 2021, 4:01am UTC](https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515/2 "2021-10-25T04:01:37Z")

</div>

It's likely that storage size represents the total of both primaries and the replicas shards.  
ILM will rollover looks specifically at primary shard size only.

---

<div class="post-metadata">

**Author:** ![nsouth](https://avatars.discourse-cdn.com/v4/letter/n/ecccb3/32.png) [@nsouth](https://discuss.elastic.co/u/nsouth)\
**Post date:** [October 25, 2021, 10:30am UTC](https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515/3 "2021-10-25T10:30:56Z")

</div>

Ah, you might be right. I didn't realize that there was 1 replica by default. I have confirmed now that the primary shard is about half of the size reported on this page. Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2021, 10:31am UTC](https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515/4 "2021-11-22T10:31:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
