Hello:
First off... Wow... These products are amazing!
I have a single logstash source and a single elasticsearch/kibana source set up. All on the same server.
(Yes Still learning it all )
I would like to have my logstash and elasticsearch configuration set up so I create a new index every day and
keep only the 7 most recent indices in elasticsearch.
Do I accomplish this by modifying elasticsearch and logstash both?
What is a simple automated solution
Any help is greatly appreciated
-Runatyr
my logstash conf file below
input {
file {
path => "/var/log/logfile.log"
start_position => "beginning"
}
}
output {
elasticsearch {
hosts => ["localhost:9200"]
}
stdout { codec => rubydebug }
}