Rollover vs monthly based indices

Elastic Stack Elasticsearch
1

Hi,
until today, in each Elastic project we worked on, we have saved ingested documents into monthly based indices (-%{YYYY.mm}).
We are considering to move from this logical pattern to the one provided by the combination of Index Rollover and ILM technologies, but we have some doubts:

  1. Which are the situations in which it is preferable to use the first approach compared to the second and vice versa?

  2. Which are the counter-natives for the first approach and vice versa?

2

ILM is just an easier way to manage index management than using date based ones. even if you use date based rollover logic.

I think it's safe to say that we recommend using ILM where you can :slight_smile:

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.