# Index Rotation Configuration

**URL:** <https://community.graylog.org/t/index-rotation-configuration/23932>\
**Category:** Graylog Central (peer support)\
**Created:** [May 20, 2022, 1:46pm UTC](https://community.graylog.org/t/index-rotation-configuration/23932 "2022-05-20T13:46:54Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![ldmit](https://avatars.discourse-cdn.com/v4/letter/l/e0b2c6/32.png) [@ldmit](https://community.graylog.org/u/ldmit)\
**Post date:** [May 20, 2022, 1:46pm UTC](https://community.graylog.org/t/index-rotation-configuration/23932/1 "2022-05-20T13:46:54Z")

</div>

Now the rotation is set:  
Index Rotation Configuration  
Select rotation strategy: Index time  
Rotation period (ISO8601 Duration): P1D  
Select retention strategy Delete the index  
Max number of indices : 30

Currently the log is 28 indices, 85,670,821 documents, 67.9GiB.  
Start running out of place. Is it possible to change the rotation mode to Index Size on the fly?

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [May 20, 2022, 9:29pm UTC](https://community.graylog.org/t/index-rotation-configuration/23932/2 "2022-05-20T21:29:08Z")

</div>

Hello && Welcome

> [@ldmit](#):
>
> Start running out of place. Is it possible to change the rotation mode to Index Size on the fly?

Yes, You would adjust the max number of indices and then Click on Recalculate index ranges.

![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/8/8b0fd4b32de72e7bfa43c19b6d04b912aa888ea9.png)

Index size , not that I know of. If the indices are to large I would adjust what is being ingested or limit the amount of fields needed. Or both.

With log shippers this can be adjusted to send only what’s needed.

This documentation may help.

- [https://docs.graylog.org/v1/docs/planning](https://docs.graylog.org/v1/docs/planning)

---

<div class="post-metadata">

**Author:** ![ldmit](https://avatars.discourse-cdn.com/v4/letter/l/e0b2c6/32.png) [@ldmit](https://community.graylog.org/u/ldmit)\
**Post date:** [May 21, 2022, 6:00am UTC](https://community.graylog.org/t/index-rotation-configuration/23932/3 "2022-05-21T06:00:41Z")

</div>

> [@gsmith](#):
>
> Yes, You would adjust the max number of indices and then Click on Recalculate index ranges.

At the moment, the maximum number of indexes is set to 30. And there are only 28 of them, I click “Recalculate index ranges” and nothing changes. How can the size be reduced?

 ![graylog](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/c/c836af8517fb6f9e9992206fd71e53d3c85e59b8.jpeg)

---

<div class="post-metadata">

**Author:** ![Karlis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/karlis/32/4798_2.png) [@Karlis](https://community.graylog.org/u/Karlis)\
**Post date:** [May 23, 2022, 5:21am UTC](https://community.graylog.org/t/index-rotation-configuration/23932/4 "2022-05-23T05:21:35Z")

</div>

Nothing changes because there are still less indexes (28) than configured maximum (30). You can reduce number of indexes to smaller number, then click to Maintenance → Rotate active write index.

---

<div class="post-metadata">

**Author:** ![ldmit](https://avatars.discourse-cdn.com/v4/letter/l/e0b2c6/32.png) [@ldmit](https://community.graylog.org/u/ldmit)\
**Post date:** [May 23, 2022, 6:17am UTC](https://community.graylog.org/t/index-rotation-configuration/23932/5 "2022-05-23T06:17:00Z")

</div>

Set the value of Max number of indices:  
25. Clicked Maintenance → Rotate active write index and nothing changed 28 indices, 90,661,627 documents, 70.8GiB. How to fix the number of indexes and reduce the size?

---

<div class="post-metadata">

**Author:** ![Karlis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/karlis/32/4798_2.png) [@Karlis](https://community.graylog.org/u/Karlis)\
**Post date:** [May 23, 2022, 6:41am UTC](https://community.graylog.org/t/index-rotation-configuration/23932/6 "2022-05-23T06:41:04Z")

</div>

Index retention takes some time. Under System messages you should see something like Running retention…

---

<div class="post-metadata">

**Author:** ![ldmit](https://avatars.discourse-cdn.com/v4/letter/l/e0b2c6/32.png) [@ldmit](https://community.graylog.org/u/ldmit)\
**Post date:** [May 23, 2022, 6:58am UTC](https://community.graylog.org/t/index-rotation-configuration/23932/7 "2022-05-23T06:58:45Z")

</div>

System jobs something should be displayed? Now there are No active system jobs.

---

<div class="post-metadata">

**Author:** ![Karlis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/karlis/32/4798_2.png) [@Karlis](https://community.graylog.org/u/Karlis)\
**Post date:** [May 23, 2022, 8:24am UTC](https://community.graylog.org/t/index-rotation-configuration/23932/8 "2022-05-23T08:24:54Z")

</div>

System → Overview under System messages

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 6, 2022, 8:25am UTC](https://community.graylog.org/t/index-rotation-configuration/23932/9 "2022-06-06T08:25:48Z")

</div>

Closed on June 6, 2022, 8:25am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
