Hi,
i want to retain my application logs for 12 months & all infra logs for 2 month.
i gone through with the index model ( http://docs.graylog.org/en/2.4/pages/configuration/index_model.html )
and created separate index ( infra logs ) with the retentions of 1 month.
now how can i send my infra logs to separate index ? do i need to make change in graylog.conf
plz help