ELK life cycle management erroring on all indecies

I'm getting this error:
illegal_argument_exception: index.lifecycle.rollover_alias

Not sure what it means, looking at a previous ticket it seems like it needs to have an alias setup for something? Documentation hasn't been helping, please advise.

Can you post the entire error? It seems like there is part of that that's missing (such as the message about why it was illegal or where it came from)

Hey, sorry this took way too long!

illegal_argument_exception: index.lifecycle.rollover_alias [filebeat-rollup-3] does not point to index [filebeat-6.7.1-2019.05.07]

If your lifecycle policy has a Rollover action defined in the Hot phase, then yes, the alias specified by index.lifecycle.rollover_alias must be set to an alias which points to that index before rollover.

Given that your index has index.lifecycle.rollover_alias set to filebeat-rollup-3, is there a possibility that you've confused Rollover (which swaps out the index backing an alias for a new one) with Rollup (which stores historical data at reduced granularity)? They are named very similarly, and are often used in a similar context (both are mainly used for timeseries-style data, such as logs or metrics), but do very different things.

Thanks! I'll look at this.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.