Logs are not rotating

[marie]

What would cause the logs to not rotate?
I am working with a new system.
I can manually rotate logs via Maintenance > Rotate active write index
It will purge excessive indices as configured.
I have tried time and count for rotation strategy.
This happens on all indices and not just the default.

The only warning in the logs is the following. Is this anything?

WARN [RestClient] request [GET http://1.2.3.4:9200/_cluster/settings?master_timeout=30s&include_defaults=true] returned 4 warnings: [299 Elasticsearch-7.10.1-1c34507e66d7db1211f66f3513706fdf548736aa “[cluster.remote.connect] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version.”],[299 Elasticsearch-7.10.1-1c34507e66d7db1211f66f3513706fdf548736aa “[node.master] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version.”],[299 Elasticsearch-7.10.1-1c34507e66d7db1211f66f3513706fdf548736aa “[node.ingest] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version.”],[299 Elasticsearch-7.10.1-1c34507e66d7db1211f66f3513706fdf548736aa “[node.data] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version.”]

[marie]

Not sure why I didn’t try rotation by size before. Maybe it was the default or conceptually time offered a convenient denotation. Regardless, the rotation strategy, Index Size, works. Millage may vary.

[AbstractRotationStrategy] Deflector index (index set <graylog_7>) should be rotated, Pointing deflector to new index now!