CODEWITHSUNDEEP
elasticsearchlogstashelastic-stack
user13493486
user13493486

Reputation:

Logstash Output Index Yearly Rotation

Quick question related to Logstash and Elasticsearch:

If I use the following output index option:

index => "myindex-%{+MM}"

Will this overwrite the oldest index once it reaches a year or just add to it?

Upvotes: 0

Views: 211

Answers (1)

Val
Val

Reputation: 217314

Logstash will never delete existing indexes, so when the year ends, the oldest index will be used again.

Nothing will get overwritten AS LONG AS the document ids of new documents are always different than the ids of the documents already existing in that index.

Upvotes: 1

Related Questions