Hello
Because of resource limitations, I am using SELKS with an external elasticsearch physical machine (as SELKS). But the Policies set in the Index Lifecycle Management (that used to work when elasticsearch was running on the local SELKS machine) were not transfered to the external elasticsearh so the indices (mainly logstash) are never deleted when they were supposed to reach the Delete phase. If I run
GET /_cat/indices?v
on the SELKS Kibana console, logstash-* indices are not shown. So we conclude that the console is not connected to the external ES server. If I use tools like Elasticvue on the external ES server, I can see 600+ indices that are never deleted.
How can I set the Lifecycle Policy to these indices that are on the external ES server?
Thanks
Hello
Because of resource limitations, I am using SELKS with an external elasticsearch physical machine (as SELKS). But the Policies set in the Index Lifecycle Management (that used to work when elasticsearch was running on the local SELKS machine) were not transfered to the external elasticsearh so the indices (mainly logstash) are never deleted when they were supposed to reach the Delete phase. If I run
GET /_cat/indices?v
on the SELKS Kibana console, logstash-* indices are not shown. So we conclude that the console is not connected to the external ES server. If I use tools like Elasticvue on the external ES server, I can see 600+ indices that are never deleted.
How can I set the Lifecycle Policy to these indices that are on the external ES server?
Thanks