Separate index for infra logs

(Amit Sharma) #1

Hi,

i want to retain my application logs for 12 months & all infra logs for 2 month.
i gone through with the index model ( http://docs.graylog.org/en/2.4/pages/configuration/index_model.html )
and created separate index ( infra logs ) with the retentions of 1 month.

now how can i send my infra logs to separate index ? do i need to make change in graylog.conf

plz help

(Jochen) #2

You’ll have to create a stream which is using the index set you’ve created and remove the messages from the default stream (also in the stream settings).

http://docs.graylog.org/en/2.4/pages/streams.html#index-sets

(system) closed #3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.