TTL isn't the best idea as it consumes a lot of resources. You're better off getting your hourly indexes working.
Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [email protected] web: www.campaignmonitor.com On 5 June 2014 02:29, Antonio Augusto Santos <[email protected]> wrote: > Hey There, > > Did you remember to change the "Timestamping" on Kibana so that it would > know you are using an hourly index ? Go the index configuration screen to > see that. > > Also, if you have the requirement for 24 hour roll out, did you try > enabling _ttl ( > http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/mapping-ttl-field.html) > on your indices ? Like that the docs older than the specified time would be > automatically deleted. > > > On Wednesday, June 4, 2014 12:16:56 PM UTC-3, Kellan Strong wrote: >> >> Hello All, >> >> I have a question about hourly sharding with either logstash or fluentd. >> Since we are, or will be using, a set up called FLEKZ. I am trying to >> integrate both logstash and fluentd together, which work well with each >> other. However, I have a business requirement for a rolling 24hour shard >> deletion. >> >> When I add >> >> logstash_dateformat %Y.%m.%d.%H >> >> in fluentd and >> >> index => "logstash-%{+YYYY.MM.dd.HH}" >> >> into logstash. >> >> Elasticsearch cannot find the indices anymore. I go onto Kibana and they >> cannot be found. I switch back to the normal Y.m.d in both and the >> information is back on the screen. Using the api I am also not able to >> search any of the indices. Is there something I am doing wrong or is there >> something in the config file that I am missing? >> >> Thank you for your help, >> > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/a1bceabb-ea26-4aa5-8358-92f6f8e2ae1e%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/a1bceabb-ea26-4aa5-8358-92f6f8e2ae1e%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEM624Zp%2BsoR-uUSDmVm_5MRBZs4AHBh-9ggT9twK5ucR_vRyg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
