Keep dashboard for more thant 1 month winth one month data retention

Elastic Stack Kibana
1

Hi

I hope someone ad my same need.

I use ELk for log analysis with one month data retention.
I was wondering if there is a way to keep dashboard (or the corresponding query result) for more than one month. Looking at docs it seems there is no way.

But I think that once I define a dashboard I could store query result for the corresponding period of time instead of the entire set of data.

Any hints?

Regards

Giuseppe

2

There's no built in way to do this, but you might be able to make it happen. If you have a reverse proxy set up in between Kibana and Elasticsearch, you might be able to configure your reverse proxy to permanently cache the aggregation results from ES so that when Kibana queries for it, the proxy returns the cache rather than hitting ES.

That said, I've never heard of this being done before, and it's definitely not a use-case that is technically supported, so even if you get it working, it may not continue to work in future versions.

I'd recommend keeping the data around, instead.