Question on log rotation?

[killmasta93]

Hi
I was wondering how does the log rotation work? is there a way to put x days to keep logs?

Thanks

[a3ilson]

This is managed by the Index Lifecycle Polices. pfelk utilizes this one which can be changed/revised as desired.

1. Alternatively, you may navigate to the Management>>Index Management>>Templates(select pfelk) and edit. From here you may remove the index settings which will allow you to edit individually from the "Index Management" page.

2. Once/if ILM is remove from the pfelk index settings, you should then be able to define the data retention here

[killmasta93]

Thanks for the reply, tried to replicate but i get invalid json