ChaosSearch creates daily index files for your critical cloud storage objects and saves them in your designated storage buckets. These index files are used by the ChaosSearch Analytics for Kibana visualizations and analytics.
Lifecycle management allows administrators to define how long to keep the indexed data for each object group to automate the retention of your indexes. You can define the time period for the indexes to control when the oldest files are removed.
The aging process begins based on the cloud object storage upload timestamp.
Lifecycle management is defined at the end of object group creation, as described in Creating Object Groups. Administrators can select the Retention Policy and define when the daily indices should be rotated out. Time frames can be specified as a number of days or months.
Administrators have the option to retain an object group's indexes "forever" without an automated lifecycle cleanup. Deselect the Retention Policy field to specify an Unlimited retention of indexes.
After an object group is created, administrators can modify the retention period settings to adjust the lifecycle for the indexes. Changes to the policy can either increase or decrease the aging out time range of the indexes associated with the object group.
If you modify a Retention Policy to decrease/shorten the lifecycle period below its current value, the system immediately removes any index files that are older than the new lifecycle range that you selected.
To modify the index lifecycle setting:
- In the Storage area, select the object group for which you want to change the index lifecycle.
- Click Group Contents.
- Click the current value for the Retention Policy. The Edit Index Retention Policy window opens.
- Change the time period for the policy. You can select a new number of days/months as applicable. You can change to/from Unlimited retention as needed.
- Click OK to place the new retention period into effect.
When the Retention Policy range is updated, the system displays a confirmation window when the changes could result in the deletion of indexes that are older than the new retention period value. Click OK to confirm that the new retention period is correct and that any older indexes should be immediately removed.
To ensure that older objects are being removed as defined by the Retention Policy, check the Events tab for messages that show the actions taken to remove older indexes that fall outside the retention period.
Updated about 2 months ago