What is ELK data rotation Policy?

Elastic Stack Elasticsearch
1

Hi Experts,

I have couple of questions

  1. What is ELK default data rotation policy. Like how data expires , where it moves once expire,where we can define after such period or time old data will archive ?
  2. What is the default data retention period of ELK ? how and where we can change this ?

Thanks
Vikas

2

Elasticsearch doesn't delete anything by default. You have to implement that yourself, e.g. by using Curator.

3

Thank you Magnus,

Any other option apart from Curator . Why I am asking because I am windows user and Curator I guess work for Linux only . Please correct me if I am wrong .

4

Curator is Python so it should work on Windows too. But there might be other options too, but if there are I don't know about them.

5

thanks

6

Curator now ships with a windows (32bit) binary package: https://www.elastic.co/guide/en/elasticsearch/client/curator/current/windows-zip.html

Update: It is now a Win32 binary.

7

Ahh!! my bad I need 32 bit package.But thank you Aaron.