Graylog - Indices

You should create two index set minimum. One of them for applications logs and the other one for database errors. The details below are just for example, please change the rotation and retention strategy values to your requirements.

Index Set - CDMP Services

image.png

Index Set - Database Error Logs

image.png