Remove policy for OSQuery manager indices

This commit is contained in:
weslambert
2023-10-27 17:26:33 -04:00
committed by GitHub
parent c955f9210a
commit 76dd6f07ab

View File

@@ -6323,33 +6323,7 @@ elasticsearch:
template:
settings:
index:
lifecycle:
name: so-logs-osquery-manager-action.responses-logs
number_of_replicas: 0
policy:
phases:
cold:
actions:
set_priority:
priority: 0
min_age: 30d
delete:
actions:
delete: {}
min_age: 365d
hot:
actions:
rollover:
max_age: 30d
max_primary_shard_size: 50gb
set_priority:
priority: 100
min_age: 0ms
warm:
actions:
set_priority:
priority: 50
min_age: 30d
so-logs-osquery-manager-actions:
index_sorting: false
index_template:
@@ -6366,33 +6340,7 @@ elasticsearch:
template:
settings:
index:
lifecycle:
name: so-logs-osquery-manager-actions-logs
number_of_replicas: 0
policy:
phases:
cold:
actions:
set_priority:
priority: 0
min_age: 30d
delete:
actions:
delete: {}
min_age: 365d
hot:
actions:
rollover:
max_age: 30d
max_primary_shard_size: 50gb
set_priority:
priority: 100
min_age: 0ms
warm:
actions:
set_priority:
priority: 50
min_age: 30d
so-logs-panw_x_panos:
index_sorting: false
index_template: