Rotate index every other day

Juan_Andres_Ramirez · February 23, 2016, 2:01pm

Hello Guys,
I'm using logstash 2.2, in a Centos 6. Logstash rotates the indices each day, is there any way to rotate index every 2 days or 3 days?. Or rotate the index by size?. I must save and keep open the index by 6 months. I want to create a new index with max size in 45GB.

Thank you.

warkolm · February 23, 2016, 6:45pm

You currently cannot do this natively, you'd have to build a process to monitor the time/size and then roll the index.

Juan_Andres_Ramirez · February 23, 2016, 7:04pm

Hey Markolm
Understood, thank you.

Christian_Dahlqvist · February 23, 2016, 10:06pm

A way to do this is by having an alias for the index you are writing into and use this in Logstash. You can then roll indices in the background through a script based on age and/or size. When the index being written to reaches the point when it should be rolled, create the next index and then switch the alias to point to the new index.

Juan_Andres_Ramirez · February 25, 2016, 3:20pm

ok, Thanks Christian.