Something wrong with my logstash.conf on the rolling index configuration... Need help

Hi There,

I am facing an issue on creating rolling index in one of our environment. Even if I mention the index with Date & Time, still it is not creating the index daily. I see only one index named as logstash-2019.11.12-000001
When the docs count was 11176798 and the store.size is 2.7 GB, I've updated the Index Lifecycle Policy and changed the Maximum index size as 3 GB. Now the store.size is 3.5 GB and still I see only one index.
Can someone please help me to figure out why it is not rolling daily or by size? How can I add a rolling index without losing any data?

Here is a snippet from my logstash.conf

output {
elasticsearch { hosts => ["Server:PortNumber"]
user => "elastic"
password => "Password"
index => "logstash-%{+YYYY.MM.dd}"
#stdout { codec => rubydebug }

Any help??

I think I figured it out!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.