Add aliases to filebeat template?

Elastic Stack Beats
1

Is there any way to set an index alias when configuring a template in filebeat.yml?
According to https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html we can set the number of shards and replicashards etc, but no mention to set an aliases.

We are currently using filebeat to send logs to elasticsearch and want to try to to use the rollover API which requires a source alias in our indices.
Indiceses that are created from filebeat does not contain any aliases.
Am i missing something from the docs? How to add an alias in filebeat.yml, like:
setup.template.pattern: "test-*"
setup.template.settings:
index.aliases: "aliasname"

If this is not supported, can we update or add just the alias later from elasticsearch dev tools without overwriting the template?

Thanks,
Alan

2

Why don't you create the index manually and then configure the rollover write alias in Filebeat? You should after all only need to create the index once.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.