Currently each index is ~10-15G and spans ~10-15 minutes doing this would make my indices huge and I'm guessing slower to search.
On Friday, February 3, 2017 at 10:51:25 AM UTC-5, Jochen Schalanda wrote: > > Hi Steve, > > On Friday, 3 February 2017 16:03:04 UTC+1, Steve Kuntz wrote: >> >> Thanks, I guess I'll wait until 2.2. I need 2 weeks of archive and my >> settings are keeping about 2100 indices @20,000,000 messages per index, >> which is about 2 weeks for me. >> > > Have you thought about using a time-based rotation/retention policy for > your Graylog setup, e. g. 1 index every few hours? > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/50627ba4-e17d-4afa-869b-984dbf900fdc%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
