Hi,
Does filebeat have a built in capability for file retention and rotation?
Filebeat doesn't manage data retention for you. There is a tool called Elastic Curator that can delete old indices for you.
You can configure how often Filebeat writes to a new index by customizing the index name. By default is uses a daily index pattern. This makes it simple to delete old data since you can just drop entire indices.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.