You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add a timestamping option that accepts either {daily,weekly,monthly,yearly) or a indexsuffix that would accept stftime type formatting e.g. -%y.%m.%d so we can have UTC dependant indices.
This cannot at the time be handled in syslog-ng because $YEAR, $MONTH, and $DAY macros are not UTC but local TZ
The text was updated successfully, but these errors were encountered:
faxm0dem
changed the title
Enhancement:
Enhancement: time-based indices
Nov 24, 2014
faxm0dem
changed the title
Enhancement: time-based indices
Enhancement: elasticsearch time-based indices
Nov 24, 2014
as pointed out by @fekete-robert if global option time-zone(UTC) is set, being able to pass index("myindex-$YEAR.$MONTH.$DAY") would do the job, but @juhaszviktor and @talien said implementing templates for the queue function is difficult
Add a
timestamping
option that accepts either {daily,weekly,monthly,yearly) or aindexsuffix
that would accept stftime type formatting e.g.-%y.%m.%d
so we can have UTC dependant indices.This cannot at the time be handled in syslog-ng because
$YEAR
,$MONTH
, and$DAY
macros are not UTC but local TZThe text was updated successfully, but these errors were encountered: