Configure Index Set

(Arcocide) #1


I don’t know how to configure index set.
I woulk like to keep log 1 year and I receive 1200 log / s.

I have 3 servers.


(Jochen) #2 :roll_eyes:

(Arcocide) #3

I know I already have a lokk this site.
That I want that it will be the best solution for me ?

I am a beginner on Graylog.

(Jochen) #4

Probably some combination of rotation and retention which allows you to keep 365 days worth of logs, e. g. daily rotation and keep 365 indices or rotate every 12 hours and keep 730 indices.

(Arcocide) #5

Ok thanks for your answer

(system) closed #6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.