Configure log retention on OpenShift Elasticsearch operator using the maxSize parameter

Solution Verified - Updated

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4
  • Red Hat OpenShift Logging (RHOL)
    • 5

Issue

  • With the Elasticsearch Operator and Cluster Logging Operator installed, is there a way to configure log retention using the maxSize parameter?

Resolution

Red Hat is aware of this issue and is working on enhancing a future version, RFE This content is not included.OBSDA-55.

In any case, as already explained in the documentation:

The OpenShift Logging Elasticsearch instance is optimized and tested for short term storage, approximately seven days. If you want to retain your logs over a longer term, it is recommended you move the data to a third-party storage system.

Root Cause

The OpenShift Logging Elasticsearch instance is optimized and tested for short term storage, approximately seven days.

SBR
Components

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.