Hi, we are considering utilizing graylog as our logging solution, one big consideration is storage limitation. in order to control the storage that the system consumes, we first have to find if there is a way to set expiration policy on records, so that important records are saved for lets say 7 years, and less important ones just for 6 months. it seems from the documentation and the config files that it is only possible to set a policy for when the deflector starts a new ES index, and for how much such past indexes to keep before removing the oldest one.
any ideas ? thanks, Nen. -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
