Enrich policy with daily index uses only oldest index after _execute

Elastic Stack Elasticsearch
1

Hi,

i try to use an enrich policy that references to a daily index e.g. index-dd.mm.yyyy. When I change the content of the index and start ingestion the index is updated. All is fine. But as soon as I update the enrich policy by POST /my-enrich-policy/_execute only the oldest of my indices is used as a lookup source. How can I configure ES to just use the latest version of my indices?

Here is my enrich policy:

PUT /_enrich/policy/my-enrich-policy
{
"match": {
"indices": "my-daily-index-*",
"match_field": "my-field",
"enrich_fields": "enrich-field"
}
}

Right now i got three indices:
my-daily-index-19.03.2020,
my-daily-index-20.03.2020,
my-daily-index-24.03.2020

I just want the lookup to look at the latest e.g. my-daily-index-24.03.2020!

How can I do that?
Thx a lot!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.