Deny ILM to create indices

Elastic Stack Elasticsearch
1

Hi,
I would like to deny ILM to automatically create indices and to only handle to optimize the storage between nodes. Is there a way to do this?
Changing my elasticsearch.yml files to:

action.auto_create_index: ".watches,.triggered_watches,.watcher-history-*"

is sadly not working.

2

It's not possible to directly disable that specific part of ILM, but you could use the now freely-available Security features of Elasticsearch to restrict the creation of ILM policies to administrators, so that all ILM policies have to be approved before use. Only the rollover and shrink actions create new indices, so identifying which policies might create indices is fairly straightforward.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.