ELK - Fleet - IIS integration

171 Views Asked by At

i have fleet server and iis integration on my elk stack. Elastic agent on the iis server ships "../Logfiles/..log" files to elasticsearch but it sends all log files on that folder(est. there are 2 years logs) I just want to send last 3 months logs. How can i set that? i'm actually looking for ignore_older option.

ps: there are seperate log files for every day.

update: ignore_older is available in updated version of iis integration.

0

There are 0 best solutions below