Rollover vs monthly based indices

until today, in each Elastic project we worked on, we have saved ingested documents into monthly based indices (-%{}).
We are considering to move from this logical pattern to the one provided by the combination of Index Rollover and ILM technologies, but we have some doubts:

  1. Which are the situations in which it is preferable to use the first approach compared to the second and vice versa?

  2. Which are the counter-natives for the first approach and vice versa?

ILM is just an easier way to manage index management than using date based ones. even if you use date based rollover logic.

I think it's safe to say that we recommend using ILM where you can :slight_smile:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.