Set Readonlyrest_audit index

Hello everyone, I just committed a change that permits you to specify the index name template, and with it the time-granularity of the audit logs i.e. one daily, hourly, yearly or monthly index.

Example:

readonlyrest:
  audit_collector: true
  audit_index_template: "'custom-prefix'-yyyy-MM"  # <--monthly pattern

This will be available in ROR Free for Elasticsearch 1.16.20

1 Like