I am currently looking into the rollover feature in elasticsearch.
At the moment i have timebased indexes from filebeats, eg: filebeat.2017-25-05
I would actually like to still keep filebeat create a new daily index and the the rollover to split these when they reach a certain amount of documents.
But cant figure out from the documentation if this is possible?
Thanks in advance