Hello,
I'm using the Graylog OVA (1.0) and I want to achieve a retention time of 6
months for the messages and I have the following questions:
- What would be the recommendation for the settings?
1. elasticsearch_max_time_per_index?
2. elasticsearch_max_number_of_indices?
- Currently, it is configured with the default settings (rotation
strategy: size, max size per index: 1GB and max number of indices: 10). How
can I reconfigure the appliance for a retentime time of 6 months?
- it's seems the command support only "hour" so it would be 4320
hours for 6 months (24*30*6)
- sudo graylog-ctl set-retention --time=*4320* --indices=*??*
--journal=*??*
Thank you,
Olivier
--
You received this message because you are subscribed to the Google Groups
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
