Elasticsearch Lifecycle Management - Diskover UI

In Diskover 2.4.2+ the ability to manage Index Lifecycle Management (ILM) policies has been added to the indices management page:

To configure new ILMs, there are three steps. Create an ILM policy, add it to an ILM template, and then apply the template to indices.

Step 1: Create an ILM Policy

Create a policy for how long to keep indices, in this example we will use a 14 day retention policy. Naming the policy should start with diskover- and be easily distinguishable for the template policy:

Step 2: Create a Template and Apply the Policy from Step 1

• Template Name — A unique identifier for the index template; the "diskover" prefix requirement ensures all templates are namespaced consistently for the application.

• Index Patterns — Wildcard expressions that determine which Elasticsearch indices this template's settings will automatically apply to when they're created.

• ILM Policy — The Index Lifecycle Management policy to attach, which controls how long index data is retained before being deleted (14 or 30 days in this case).

• Priority — When multiple templates match the same index, the one with the higher priority number wins and its settings take precedence.

For any indices that were generated before the ILM was created, you will need to click the Add to Indices. For any indices that match the index template moving forward it will automatically be applied.

After applying the template you can see how many indices are matching and assigned to the policy in the ILM policy table: