# Something wrong with my logstash.conf on the rolling index configuration... Need help

**URL:** <https://discuss.elastic.co/t/something-wrong-with-my-logstash-conf-on-the-rolling-index-configuration-need-help/208545>\
**Category:** Logstash\
**Created:** [November 19, 2019, 4:25pm UTC](https://discuss.elastic.co/t/something-wrong-with-my-logstash-conf-on-the-rolling-index-configuration-need-help/208545 "2019-11-19T16:25:22Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shylendran](https://avatars.discourse-cdn.com/v4/letter/s/8491ac/32.png) [@shylendran](https://discuss.elastic.co/u/shylendran)\
**Post date:** [November 19, 2019, 4:25pm UTC](https://discuss.elastic.co/t/something-wrong-with-my-logstash-conf-on-the-rolling-index-configuration-need-help/208545/1 "2019-11-19T16:25:23Z")

</div>

Hi There,

I am facing an issue on creating rolling index in one of our environment. Even if I mention the index with Date & Time, still it is not creating the index daily. I see only one index named as logstash-2019.11.12-000001  
When the docs count was 11176798 and the store.size is 2.7 GB, I've updated the Index Lifecycle Policy and changed the Maximum index size as 3 GB. Now the store.size is 3.5 GB and still I see only one index.  
Can someone please help me to figure out why it is not rolling daily or by size? How can I add a rolling index without losing any data?

Here is a snippet from my logstash.conf

output {  
elasticsearch { hosts =\> ["Server:PortNumber"]  
user =\> "elastic"  
password =\> "Password"  
index =\> "logstash-%{+YYYY.MM.dd}"  
}  
#stdout { codec =\> rubydebug }  
}

---

<div class="post-metadata">

**Author:** ![shylendran](https://avatars.discourse-cdn.com/v4/letter/s/8491ac/32.png) [@shylendran](https://discuss.elastic.co/u/shylendran)\
**Post date:** [December 3, 2019, 2:47pm UTC](https://discuss.elastic.co/t/something-wrong-with-my-logstash-conf-on-the-rolling-index-configuration-need-help/208545/2 "2019-12-03T14:47:28Z")

</div>

Any help??

---

<div class="post-metadata">

**Author:** ![shylendran](https://avatars.discourse-cdn.com/v4/letter/s/8491ac/32.png) [@shylendran](https://discuss.elastic.co/u/shylendran)\
**Post date:** [December 10, 2019, 6:15pm UTC](https://discuss.elastic.co/t/something-wrong-with-my-logstash-conf-on-the-rolling-index-configuration-need-help/208545/3 "2019-12-10T18:15:13Z")

</div>

I think I figured it out!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 7, 2020, 6:27pm UTC](https://discuss.elastic.co/t/something-wrong-with-my-logstash-conf-on-the-rolling-index-configuration-need-help/208545/4 "2020-01-07T18:27:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.