I thought I replied to this yesterday....Anyways it was with kibana. Thank you for that.
On Wednesday, June 4, 2014 9:29:18 AM UTC-7, Antonio Augusto Santos wrote: > > Hey There, > > Did you remember to change the "Timestamping" on Kibana so that it would > know you are using an hourly index ? Go the index configuration screen to > see that. > > Also, if you have the requirement for 24 hour roll out, did you try > enabling _ttl ( > http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/mapping-ttl-field.html) > > on your indices ? Like that the docs older than the specified time would be > automatically deleted. > > On Wednesday, June 4, 2014 12:16:56 PM UTC-3, Kellan Strong wrote: >> >> Hello All, >> >> I have a question about hourly sharding with either logstash or fluentd. >> Since we are, or will be using, a set up called FLEKZ. I am trying to >> integrate both logstash and fluentd together, which work well with each >> other. However, I have a business requirement for a rolling 24hour shard >> deletion. >> >> When I add >> >> logstash_dateformat %Y.%m.%d.%H >> >> in fluentd and >> >> index => "logstash-%{+YYYY.MM.dd.HH}" >> >> into logstash. >> >> Elasticsearch cannot find the indices anymore. I go onto Kibana and they >> cannot be found. I switch back to the normal Y.m.d in both and the >> information is back on the screen. Using the api I am also not able to >> search any of the indices. Is there something I am doing wrong or is there >> something in the config file that I am missing? >> >> Thank you for your help, >> > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/00e45fad-5b07-4cd8-82ca-45dd25d1c71f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
