Error index.lifecycle.rollover_alias does not pointto index

Elastic Stack Elasticsearch
1

Hello?
I have a problem with Elasticsearch 6.8.
I've try to create rollover but I have an error.
type" : "illegal_argument_exception",
"reason" : "index.lifecycle.rollover_alias [test-alias-rollover] does not point to index [filebeat-7.4.2-ker-roolover-000001]",
"stack_trace" : """
java.lang.IllegalArgumentException: index.lifecycle.rollover_alias [test-alias-rollover] does not point to index [filebeat-7.4.2-ker-roolover-000001]
at org.elasticsearch.xpack.core.indexlifecycle.WaitForRolloverReadyStep.evaluateCondition(WaitForRolloverReadyStep.java:92)
at org.elasticsearch.xpack.indexlifecycle.IndexLifecycleRunner.runPeriodicStep(IndexLifecycleRunner.java:133)
at org.elasticsearch.xpack.indexlifecycle.IndexLifecycleService.triggerPolicies(IndexLifecycleService.java:270)
at org.elasticsearch.xpack.indexlifecycle.IndexLifecycleService.triggered(IndexLifecycleService.java:213)
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine.notifyListeners(SchedulerEngine.java:168)
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine$ActiveSchedule.run(SchedulerEngine.java:196)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)

"""

Create policy
PUT /_ilm/policy/test_rollover_policy
{
"policy": {
"phases": {
"hot": {
"actions": {
"rollover": {
"max_size": "2mB"
, "max_docs": 1000
, "max_age": "1d"
}
}
},
"delete": {
"min_age": "30d",
"actions": {
"delete": {}
}
}
}
}
}

create template

   PUT _template/test_template_rollover
{
  "index_patterns": ["*-ker-roolover-*"], 
  "settings": {
    "number_of_shards": 1,
    "number_of_replicas": 1,
    "index.lifecycle.name": "test_rollover_policy", 
    "index.lifecycle.rollover_alias": "test-alias-rollover" 
  }
}

create index and associate alias
PUT /rollover-000001
{
"aliases": {
"test-alias-rollover":{
"is_write_index": true
}
}
}

check alias
GET /_cat/aliases?v

alias index filter routing.index routing.search
.kibana .kibana_7 - - -
test-alias-rollover rollover-000001 - - -

Logs filed by logstash:
elasticsearch {
hosts => [ 'IP' ]
manage_template => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}-ker-roolover-000001"
#filebeat-7.4.2-ker-roolover-000001
}

2

You alias must match the exact name ?

Isnt it missing the "filebeat" part ?

3 
POST /_aliases
{
    "actions" : [
        { "add" : { "index" : "filebeat-7.4.2-ker-roolover-000001", "alias" : "test-alias-rollover" , "is_write_index": true} }
    ]
}

alias index filter routing.index routing.search
test-alias-rollover filebeat-7.4.2-ker-roolover-000001 - - -

I change it but it's the same issue.
index.lifecycle.rollover_alias [test-alias-rollover] does not point to index [filebeat-7.4.2-ker-roolover-000001]

4

I found this problems. alias test-alia rollover pint to rollover-00001 and rollover-00002.
Created other index but not fill it. Continue to fill rollover-000001

image
image1174×109 6.76 KB

image
image1010×912 68.5 KB

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.