We are re-indexing our indices and giving it a new name lets say "indicies_name_v2"
I suppose this will have impact to our alerts and dashboard
Correct me if i am wrong. For alerts i suppose this is what we need to do
-
Query alerts for all Data view being used
-
Query above data view so as to know all matching sources
-
Add the new indices to the appropriate data view
Anything else to be done?
May i also know what is the elastic default index pattern for alerts to query?
i have tried using "alerts-default.alerts-*"
but i am unable to retrieve the "data view" in the "Rule definition" ![]()
For dashboard is there any advice to do so?