Possible to change index rollover time?

Elastic Stack Elasticsearch
1

Hi folks,

We've seen a big increase in our log volume and need to be able to reduce the maximum shard size to a manageable level.

I'm wondering if there's any way to automatically spawn a new logstash index when it reaches a certain maximum size, or if there's a way I can define the rollover time so it happens N times a day, where N is some number I may need to tweak.

Any help would be appreciated.

Best,

Jeff Kirk

2

I think you are asking for this:

Well, kind of that. That is just and API and you'd cron it yourself.

3

Cool! I guess we'll have to wait on that then. Appreciate the feedback.

4

Can't you accomplish the same thing by increasing the number of shards?