Feedback on Rollover (16:28):

• Too much text! Can we explain this more concisely?
• Explain the index naming format:
  • ds = datastream
  • name = description of whatever the index is for
  • type = logs, metrics, etc.
  • timestamp
  • number 0001, 0002, etc.
• Note that numbers are critical for index to be able to rollover
• Note that newly opened index will have same name, different number, and possibly different date from newly closed index.
• Explain the thresholds that trigger rollover.
  • Users think you always ingest into the same index: Rather it's the same data stream, different index. Search a data stream to seach all indices at once.
• We explain at length why to use rollovers, but not what it is and how to use it.
• Provide an example of rollovers with the numbered indices (Answer: “Why do I have 20 indices of the same index?”)
• Additional feedback items that need to be addressed