Index Lifecycle Management (ILM)
Master Index Lifecycle Management to automate rollover, the hot-warm-cold architecture, and retention so log indices stay fast and storage stays under control.
Why Manage Index Lifecycle?
Time-series data like logs grows endlessly. Index Lifecycle Management (ILM) automates moving, shrinking, and deleting indices so old data does not crush your cluster.
Rollover
Rollover creates a new index when the current one hits a size, age, or document count threshold. Writes always go to a single alias.
rollover:
max_size: 50gb
max_age: 1d
max_docs: 100000000All lessons in this course
- Elasticsearch Query Language (DSL)
- Logstash Filters and Pipelines
- Kibana Discover and Lens
- Index Lifecycle Management (ILM)