Hi There,
I am facing an issue on creating rolling index in one of our environment. Even if I mention the index with Date & Time, still it is not creating the index daily. I see only one index named as logstash-2019.11.12-000001
When the docs count was 11176798 and the store.size is 2.7 GB, I've updated the Index Lifecycle Policy and changed the Maximum index size as 3 GB. Now the store.size is 3.5 GB and still I see only one index.
Can someone please help me to figure out why it is not rolling daily or by size? How can I add a rolling index without losing any data?
Here is a snippet from my logstash.conf
output {
elasticsearch { hosts => ["Server:PortNumber"]
user => "elastic"
password => "Password"
index => "logstash-%{+YYYY.MM.dd}"
}
#stdout { codec => rubydebug }
}