After creating an index template, I get a data stream as intended. My the index template matches the start of the name of my incoming index pattern coming from logstash.
But unfortunately the index of the data stream is empty, i. e. has "docs count: 0".
I'm have no idea where i went wrong and I'm therefor looking forward to any help.
Thanks for using Elasticsearch, and for your interest in data streams and ILM.
The set up lifecycle policy guide you followed will set up ILM for a standalone index with an index alias. So I suspect you didn't create a data stream? You can verify this by using the get data stream API. However even without the data stream, writting against the configured alias/index should be successful. We'd need more information in order to diagnose this, namely: the index policy definition, the index template matching the target index, the index information as returned by the get index API, the ILM explain output for the index, the request and response you use for indexing documents and/or the logstash configuration
The guide for setting up a data stream with ILM is available here
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.