Provision ILM policy for elastic agent streams

Elastic Stack Elastic Agent
, ,
1

Hi folks,

I'm new to Elastic Agent configuration and running the latest ECK build on Kubernetes.

While I really like to visibility Fleet offers, it seems I'm unable to provision custom ILM policies like I can with Beats, for example:

setup.ilm:
      enabled: true
      overwrite: true
      policy_name: "filebeat"
      policy_file: /usr/share/filebeat/ilm-policy.json
      pattern: "{now/d}-000001"

Is there a way I can create a policy that does daily rollovers and only keeps the data for 90 days, preferably in code like the above block?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.