I am trying to configure Kibana to use a rollup to parse and simplify apache James data. I can currently push data to an index which sets the data according to a template. I can also use rollup to get and simplify the data via the Kibana client and use ILP to delete indexes after a period of time. However I cannot figure out how to delete the data in the rollup, if the data is older than 6 months.
Have you tried setting an ILM policy on the target of your rollup data? Currently rollups are stored in Elasticsearch, so I believe you could set it to delete the rollup after a certain time.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.