Index Policy - Cold Storage

55 views
Skip to first unread message

Sam Heuchert

unread,
Sep 19, 2022, 2:01:14 PM9/19/22
to Wazuh mailing list
Hi!

I'm looking to find the best practice for applying index policies to indices older than 14 days.  I attempted to configure the following, but it did not work.  I'm running a distributed cluster with ample resources.  

Thanks!
Sam
Index Policy Cold Storage.png

Damian Nicastro

unread,
Sep 19, 2022, 4:06:23 PM9/19/22
to Wazuh mailing list

Hello  sheuchert:

I hope you are fine.
In order to implement Index policies, we recommend you read carefully and follow the document below:


Here, you have a brief explanation of the diffrent phases where you can put your Indices. Please, also notice that the first half of the document is Elastic Stack ILM policies while the part starting with "Opendistro ISM" is for Opendistro and Opensearch installations.

I hope this helps.
Thanks
Reply all
Reply to author
Forward
0 new messages