Making logs expire relative to the timestamp and not the indexing time(system time)

I am using Elastic Search with a TTL for each index, and I have 1 index per

Now the problem is: I get my logs to expire , say 1 day(which I specify in
the default.json) after the indexing, but what I want is the logs should
expire relative to the timestamp of the logs(which I parse and replace the
timestamp with) and not the time when the logs were indexed.

How do I do this?
Need expert help please.


You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
For more options, visit