From Kibana below ILM policy is applied:
PUT _ilm/policy/filebeat
{
"policy": {
"phases": {
"hot": {
"min_age": "0ms",
"actions": {
"rollover": {
"max_age": "1d"
}
}
},
"delete": {
"min_age": "4d",
"actions": {
"delete": {}
}
}
}
}
}
With above policy, if index is created at today 11am then new index is creating tomorrow 11am but my expectation is new index should create every day at 12am, as I want 1 index per day.
Any idea how can I achieve my requirement?
Create index templates and suffix your indices with a day, e.g.
my-logs-2020.10.14
, indices will be created automatically with template settings.