Hi,
i want to retain my application logs for 12 months & all infra logs for 2 month.
i gone through with the index model ( http://docs.graylog.org/en/2.4/pages/configuration/index_model.html )
and created separate index ( infra logs ) with the retentions of 1 month.
now how can i send my infra logs to separate index ? do i need to make change in graylog.conf
plz help
jochen
(Jochen)
July 22, 2018, 7:49pm
2
You’ll have to create a stream which is using the index set you’ve created and remove the messages from the default stream (also in the stream settings).
http://docs.graylog.org/en/2.4/pages/streams.html#index-sets
1 Like
system
(system)
Closed
August 5, 2018, 7:49pm
3
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.