I use a Monitoring Framework designed as a solution to monitor heterogeneous networks and systems in terms of services (platforms, applications for TELCO systems).
This framework collects in synchronous way the required data from several devices, it stores them in a Mongo Data Base and then transfers all stored collections from MongoDB to Elasticsearch via river-mongodb plugin. We can have a huge amount of data stored in a single index of Elasticsearch, for example, about 5.2 millions of documents can be collected in a single MongoDB collection for only 8 hours of monitoring and so the number of documents in a single index grows rapidly. At present, I have installed on Centos 6.5 server an Elasticsearch Cluster configuration with one node and five indices but only one index for all synchronous data. My problem is to be able to create different indices in Elasticsearch where I can share the synchronous data, and so I would like to know if it is possible to create an index name with a timestamp appended to it, like so Logstash uses the timestamp from an event to derive the related Elasticsearch index name. Some idea, suggestion, help? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/37bb3713-56d9-443c-b3a5-9056092b958d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
