# It is possible to autoratate datastream at Kibana?

**URL:** <https://discuss.elastic.co/t/it-is-possible-to-autoratate-datastream-at-kibana/384171>\
**Category:** Kibana\
**Created:** [December 18, 2025, 5:08pm UTC](https://discuss.elastic.co/t/it-is-possible-to-autoratate-datastream-at-kibana/384171 "2025-12-18T17:08:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![alastor](https://avatars.discourse-cdn.com/v4/letter/a/f08c70/32.png) [@alastor](https://discuss.elastic.co/u/alastor)\
**Post date:** [December 18, 2025, 5:08pm UTC](https://discuss.elastic.co/t/it-is-possible-to-autoratate-datastream-at-kibana/384171/1 "2025-12-18T17:08:43Z")

</div>

Hello, i would like to share this issue:

i got a kibana and filebeat reported to elasticsearch inside K8s, but that by default creates a datastream called .ds-filebeat-8.5.1-2025.12.14-000001, it is possible to make a rotate by day and also delete auto after 30d?  
best regards

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [December 19, 2025, 11:44am UTC](https://discuss.elastic.co/t/it-is-possible-to-autoratate-datastream-at-kibana/384171/2 "2025-12-19T11:44:28Z")

</div>

Hi @alastor,

Welcome! You can manage the lifecycle of the streams using ILM and configure it within your filebeat configuration:

> **[Configure index lifecycle management | Beats](https://www.elastic.co/docs/reference/beats/filebeat/ilm)**
>
> Use the index lifecycle management (ILM) feature in Elasticsearch to manage your Filebeat their backing indices of your data streams as they age. Filebeat...

> **[ILM automation tutorials | Elastic Docs](https://www.elastic.co/docs/manage-data/lifecycle/index-lifecycle-management/ilm-tutorials)**
>
> A collection of tutorials is available to help you control the lifecycle of your data using index lifecycle management. index lifecycle management (ILM)...

This would include the rotation and deletion that you're requesting.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![alastor](https://avatars.discourse-cdn.com/v4/letter/a/f08c70/32.png) [@alastor](https://discuss.elastic.co/u/alastor)\
**Post date:** [December 19, 2025, 3:30pm UTC](https://discuss.elastic.co/t/it-is-possible-to-autoratate-datastream-at-kibana/384171/3 "2025-12-19T15:30:22Z")

</div>

Thanks a lot for your response, i will check that.

Best regards