Beats and index naming

Elastic Stack Beats
21

Per here "index.lifecycle.rollover_alias" needs to match the alias in the index.

Also I think you need a few more digits for the index name or it will break after 9

PUT /winlogbeat-7.3.0-2019.33-0001
{
  "aliases": {
    "winlogbeat-7.3.0": {
      "is_write_index": true
    }
  }
}

I usually start these adventures with all the defaults and get them running, understand how it all, then start to modify i.e. I would have started with all the defaults (daily) got it working, understood then move onto altering it... just my approach ... and yes there are a lot of similar settings / config going on.

22

This thread may be of help as well

23

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.