What is ELK data rotation Policy?


(Vikas Gopal) #1

Hi Experts,

I have couple of questions

  1. What is ELK default data rotation policy. Like how data expires , where it moves once expire,where we can define after such period or time old data will archive ?
  2. What is the default data retention period of ELK ? how and where we can change this ?

Thanks
Vikas


(Magnus Bäck) #2

Elasticsearch doesn't delete anything by default. You have to implement that yourself, e.g. by using Curator.


(Vikas Gopal) #3

Thank you Magnus,

Any other option apart from Curator . Why I am asking because I am windows user and Curator I guess work for Linux only . Please correct me if I am wrong .


(Magnus Bäck) #4

Curator is Python so it should work on Windows too. But there might be other options too, but if there are I don't know about them.


(Vikas Gopal) #5

thanks


(Aaron Mildenstein) #6

Curator now ships with a windows (32bit) binary package: https://www.elastic.co/guide/en/elasticsearch/client/curator/current/windows-zip.html

Update: It is now a Win32 binary.


(Vikas Gopal) #7

Ahh!! my bad I need 32 bit package.But thank you Aaron.


(system) #8