Skip to content

[FEATURE] Introduce min_docs settings for rollover logic of findings/alerting indices #379

@petardz

Description

@petardz

Is your feature request related to a problem?
Currently, our index management job will do rollover of finding/alert indices when one of 2 conditions are met: max_index_age or max_index_docs. Rollover would be done, even tho index has 0 docs.

What solution would you like?
Introduce min_docs settings and check it before executing rollover API.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    Status

    Backlog (Feature Requests, Enhancements)

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions