Log and Indices rotation in a distributed ELK environment

Hi,

I have two master nodes and three data nodes and one for kibana.

How do I set up curator in this distributed environment? Please advise. Thanks! Regards,

Kartik Vashishta

You could have a cron job on all hosts (or at least all master-eligible ones) that runs Curator and connects to localhost. I think Curator has an option to bail out right away if the host it connects to isn't the current master node. That way you're (practically) guaranteed that Curator will run on exactly one machine at a time.

If that doesn't answer your question please be more specific on what the problem is.