Alias for monthly indices

[kottapar (R a V)]

Hey guys,

We've created an alias perferr for two indices say perf-yyyy.mm and err-yyyy.mm. However when a new index is created the next month we have to run the alias command again.
Is there any way we can make any new indices created to get auto-aliased

From the documentation "The create index API allows also to provide a set of aliases:"

PUT test
{
    "aliases" : {
        "alias_1" : {},
        "alias_2" : {
            "filter" : {
                "term" : {"user" : "kimchy" }
            },
            "routing" : "kimchy"
        }
    }
}

But is there any way to specify the alias in the elasticsearch output in logstash?

[Christian_Dahlqvist]

You can define aliases through an index template, which will automatically add new indices to the alias as they are created.