Hi, I am running a 3 cluster configuration, each of systems is running graylog and aelasticsearch.
My index rotation settings are following: Index rotation strategy:Index TimeRotation period:P1D (1d, a day) Index retention strategy:DeleteMax number of indices:100 One would expect that this will create 100 indexes in 100 days. But after running this for about 18 days, I have indexes from 1 til 47. The oldest data in index one is 17 days old. It seesm like 2 or 3 new indexes pred day are created. So it seems I will need to increase Index number to something close to 300 if I want data to be deleted after 100 days. I can increase index number but just curious, is this a bug or is this working as it should, maybe because of 3 node cluster. Thanks, Lec -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/3093a7d3-e0f4-42ab-8551-ac62b91dbb6f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
