Monthly indices for rollover using data stream

Elastic Stack Beats
1

Hi,

Using the blog below I was able to get indices as mentioned in last step.

https://www.elastic.co/blog/how-to-manage-elasticsearch-data-multiple-indices-filebeat-ilm-data-streams

I am able to get indices as well as rollover is working. But the pattern which is generated is

.ds-filebeat-apache-2021-06-21-000001
.ds-filebeat-apache-2021-06-21-000002
.ds-filebeat-apache-2021-06-22-000003

My use case is such that per day indexing size is less and retention period is more. So to prevent oversharding I want to manage indices month wise. i.e.

.ds-filebeat-apache-2021-06-000001
.ds-filebeat-apache-2021-07-000002

Thanks,
Bryce Fernandes

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.