Separate index for infra logs

(Amit Sharma) #1


i want to retain my application logs for 12 months & all infra logs for 2 month.
i gone through with the index model ( )
and created separate index ( infra logs ) with the retentions of 1 month.

now how can i send my infra logs to separate index ? do i need to make change in graylog.conf

plz help

(Jochen) #2

You’ll have to create a stream which is using the index set you’ve created and remove the messages from the default stream (also in the stream settings).

(system) closed #3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.