Hello,
Does anybody know how I can specify TTL for elasticsearch index? This is
what I currently have.
template(name = "logstash-index" type="list") {
constant(value = "logstash-")
property(name = "timereported" dateFormat="rfc3339" position.from="1"
position.to="4")
constant(value = ".")
property(name = "timereported" dateFormat="rfc3339" position.from="6"
position.to="7")
constant(value = ".")
property(name = "timereported" dateFormat="rfc3339" position.from="9"
position.to="10")
}
action(
type = "omelasticsearch"
template = "es-payload"
dynSearchIndex = "on"
searchIndex = "logstash-index"
searchType = "cassandra"
server = "h1.lab.ppops.net"
serverport = "9200"
errorFile = "/var/log/rsyslog/ES-error.log"
bulkmode = "on"
action.resumeretrycount = "-1"
)
Thanks,
Alec
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
