Daily index - lifecycle policies

Elastic Stack Elasticsearch
1

So i am trying to set lifecycle policies to my existing indexes coming from logstash. my indexes follow a patterm myindex-yyyy-mm-dd so i have an index per day.

So far, https://www.elastic.co/guide/en/elasticsearch/reference/7.4/getting-started-index-lifecycle-management.html does not work since this is made for a different index pattern like myindex-nnnnn

Then, i created a policy with warm cold and delete specifications and added a template

PUT _template/hot-warm-cold-delete-180days-template
{
  "order": 10,
  "index_patterns": ["myindex-*"],
  "settings": {
    "index.lifecycle.name": "hot-warm-cold-delete-180days",
    "index.routing.allocation.require.data": "hot"
  }
}

but cant really associate my policy since mhy indexes doesnt have an alias.

When i try to give them an alias, i get an exception has more than one write alias.

So, how can i achive to put on warm or cold indexes whose pattern are older than a month or so ?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.