How to schedule Kibana index rollover?

449 views Asked by At

From Kibana below ILM policy is applied:

PUT _ilm/policy/filebeat
{
  "policy": {
    "phases": {
      "hot": {
        "min_age": "0ms",
        "actions": {
          "rollover": {
            "max_age": "1d"
          }
        }
      },
      "delete": {
        "min_age": "4d",
        "actions": {
          "delete": {}
        }
      }
    }
  }
}

With above policy, if index is created at today 11am then new index is creating tomorrow 11am but my expectation is new index should create every day at 12am, as I want 1 index per day.

Any idea how can I achieve my requirement?

2

There are 2 answers

1
Evaldas Buinauskas On

Create index templates and suffix your indices with a day, e.g. my-logs-2020.10.14, indices will be created automatically with template settings.

0
sudhir tataraju On

In Kibana we have an option called rollup job to achieve same: https://www.elastic.co/webinars/managing-your-elasticsearch-data-lifecycle enter image description here