Lifecycle delete phase question

Elastic Stack Elasticsearch
1

Hi all,

I want to make a lifecycle policy to my index

I want the conditions are delete after 15days or 25gb

but in delete phase it only allows me delete after n days not by n gb too

Is there some way to make that? (without rollover )

thanks in advance

2

Reading the ILM documentation I see two relevant things:

From the Phase Transitions section (bolds are mine)

ILM moves indices through the lifecycle according to their age. To control the timing of these transitions, you set a minimum age for each phase. For an index to move to the next phase, all actions in the current phase must be complete and the index must be older than the minimum age of the next phase.

Then in the Rollover documentation it explicitly states that they are needed to delete old data:

Using rolling indices enables you to:
  • Optimize the active index for high ingest rates on high-performance hot nodes.
  • Optimize for search performance on warm nodes.
  • Shift older, less frequently accessed data to less expensive cold nodes,
  • Delete data according to your retention policies by removing entire indices.

So my understanding is that you need to define a rollover policy to rotate your indices and then move those old indices into a delete phase according to their age.

3

Thank you so much!

Im having some problems with rollover policy...

I dont sure if I can ask here o create a new post

Thanks

4

Please create a new post :pray:

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.