Hi,
If i make any changes to rotation_strategy,
elasticsearch_max_size_per_index,elasticsearch_max_time_per_index = 1h or
elasticsearch_max_number_of_indices = 10 in the graylog.conf file, they
all go back to default once i run graylog-ctl reconfigure. I have tried
different combinations with time or size.
# - "count" of messages per index, use
elasticsearch_max_docs_per_index below to configure
# - "size" per index, use elasticsearch_max_size_per_index below to
configure
# valid values are "count", "size" and "time", default is "count"
-rotation_strategy = time
+rotation_strategy = size
# (Approximate) maximum number of documents in an Elasticsearch index
before a new index
# is being created, also see no_retention and
elasticsearch_max_number_of_indices.
@@ -113,7 +113,7 @@
# 1d = 1 day
# 12h = 12 hours
# Permitted suffixes are: d for day, h for hour, m for minute, s for
second.
-elasticsearch_max_time_per_index = 1d
+elasticsearch_max_time_per_index = 1h
# Disable checking the version of Elasticsearch for being compatible
with this Graylog release.
# WARNING: Using Graylog with unsupported and untested versions of
Elasticsearch may lead to data loss!
@@ -123,7 +123,7 @@
#no_retention = false
# How many indices do you want to keep?
-elasticsearch_max_number_of_indices = 20
+elasticsearch_max_number_of_indices = 10
Am I doing this wrong?
Thank you,
Marsel
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/0352ea22-acb3-46bc-89e8-036e7ee22cfd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
