Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
RHEL : 8
Opensearch : 2.9
Describe the issue:
I was using elasticsearch and used to send logs to ILM policy based index with logstash config similar like below -
output {
elasticsearch {
hosts => hosts
ilm_enabled => true
ilm_rollover_alias => "sample-index"
ilm_pattern => "{now/d}-000001"
ilm_policy => "sample-policy"
cacert => "cert path"
user => "username"
password => "password"
}
}
I just use to create ILM polcy. Alias and index template creation was taken automatically.
How can I achieve similar result in Opensearch.
Use Case : Opensearch is used to store logs from various source using filebeat > logstash > opensearch.
Size of the logs per day varies from different types of source and we group different types of source and send them to seprate index.
I want to make sure that index get rollver based on size or days automatically and it shuould have format like -<YYYY.MM.DD>-00001
Configuration:
Relevant Logs or Screenshots: