# Beats manual index template loading instructions (alternate method) is missing index alias step

**URL:** https://discuss.elastic.co/t/beats-manual-index-template-loading-instructions-alternate-method-is-missing-index-alias-step/245991
**Category:** Beats
**Tags:** winlogbeat
**Created:** [August 22, 2020, 4:08pm UTC](https://discuss.elastic.co/t/beats-manual-index-template-loading-instructions-alternate-method-is-missing-index-alias-step/245991 "2020-08-22T16:08:01Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![alhazred](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alhazred/32/74358_2.png) [@alhazred](https://discuss.elastic.co/u/alhazred)
#### Post date: [August 22, 2020, 4:08pm UTC](https://discuss.elastic.co/t/beats-manual-index-template-loading-instructions-alternate-method-is-missing-index-alias-step/245991/1 "2020-08-22T16:08:01Z")

</div>

All the beats documentation provide instructions on loading the template index manually through an alternate method if your beat shipper doesn't have access to elasticsearch (for example: [https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-template.html#load-template-manually](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-template.html#load-template-manually))

These instructions involve exporting the template using the "export template" command, then loading the template into elasticsearch using curl.

I spent ages trying to get this to work with the winlogbeat but kept getting "Text fields are not optimised for operations" errors. After proxying the commands the shipper is sending to elasticsearch it turns out that there is an index alias needs to be created, a step that is not included in the instructions. For example, for winlogbeat 7.9.0 this would be:

```auto
 curl -s -u "elastic:XXXXXXXX" -X PUT "https://localhost:9200/%3Cwinlogbeat-7.9.0-%7Bnow%2Fd%7D-000001%3E" \
    	-H 'Content-Type: application/json' -d "{\"aliases\":{\"winlogbeat-7.9.0\":{\"is_write_index\":true}}}"

```

After running this everything worked perfectly. Wasn't sure wether I should raise this as an issue so just decided to leave it here in case anyone else encounters this problem.

---

<div class="post-metadata">

### Author: ![jsoriano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsoriano/32/27920_2.png) [@jsoriano](https://discuss.elastic.co/u/jsoriano)
#### Post date: [August 23, 2020, 1:49pm UTC](https://discuss.elastic.co/t/beats-manual-index-template-loading-instructions-alternate-method-is-missing-index-alias-step/245991/2 "2020-08-23T13:49:50Z")

</div>

Hey @alhazred, welcome to discuss 🙂

Yes, this looks like an issue with the documentation, when using ILM an alias should be created too.

> [@alhazred](#):
>
> After proxying the commands the shipper is sending to elasticsearch it turns out that there is an index alias needs to be created

Did Winlogbeat log any error when the alias was missing?

Please create an issue or open a pull request to fix the docs. Thanks!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 20, 2020, 3:49pm UTC](https://discuss.elastic.co/t/beats-manual-index-template-loading-instructions-alternate-method-is-missing-index-alias-step/245991/3 "2020-09-20T15:49:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
