Kibana log file (kibana.log, Size is 38.2 GB) is too large in (/var/log/kibana) how to free space or delete old logs from file. If i delete this files should i lost index log data?

[bbkunbi (bhavesh B)]

[rashmi (kulkarni)]

Try using index lifecycle management, which is available in ELK stack 6.6 newer version.

Please check this link:

Getting started with index lifecycle management | Elasticsearch Guide [6.6] |...

This will create new index when size goes beyond 2GB or 1d, and it will delete 1day back data.

PUT _ilm/policy/stream_policy
{
  "policy": {
    "phases": {
      "hot": {
        "actions": {
          "rollover": {
            "max_size": "2GB" ,   
            "max_age": "1d"
          }
        }
      },
      "delete": {
        "min_age": "1d",
        "actions": {
          "delete": {} 
        }
      }
    }
  }
}

[bbkunbi (bhavesh B)]

Thank you mam,

can i delete kibana.log file using below command to free space? is it affect the data which i logged in kibana index?
==> cat /dev/null > kibana.log

[Kushal_Roy]

maam can you answer my topic as well??

[stephenb (Stephen Brown)]

Hi @bbkunbi

The Kibana logs You are showing have nothing to do with the indices data that is stored within elasticsearch.

The one exception would be if you use filebeat to process the kabana logs and put them in elasticsearch.

I suspect you are not doing that.

Even with that, if you erase the Kibana log, you're not going to erase the data that resides inside elasticsearch... They are two completely separate things.

The Kibana logs that you are referring to are simple Kibana application logs.. nothing more.

You should refer to this

Configure logging | Kibana Guide [8.3] | Elastic

So yes you could clean up those logs to free up space.

[bbkunbi (bhavesh B)]

Thank you!