We have a monitoring cluster that is set up to monitor 3 other clusters and the beats for those clusters. The monitoring cluster is being filled up with indices such as .monitoring-es-7-2019.12.28. Looking at documentation here: https://www.elastic.co/guide/en/elasticsearch/reference/current/monitoring-settings.html with xpack.monitoring.history.duration it defaults to 7 days. However, with a note it only impacts local type exporters and not http exporters. I am unclear if, since we are sending the monitoring to the monitoring cluster, that is an http exporter in this case. If that is, then what is the recommended way to handle cleanup of the old indicies in the monitoring cluster? A ILM policy?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.