Error when trying to add a snapshot policy on ELK ECE

Elastic Stack Elasticsearch
1

Hello!
I've encountered this error when I tried to add a snapshot policy to my ELK cluster (on ECE):

{
  "error" : {
    "root_cause" : [
      {
        "type" : "invalid_index_name_exception",
        "reason" : "Invalid index name [_slm], must not start with '_', '-', or '+'",
        "index_uuid" : "_na_",
        "index" : "_slm"
      }
    ],
    "type" : "invalid_index_name_exception",
    "reason" : "Invalid index name [_slm], must not start with '_', '-', or '+'",
    "index_uuid" : "_na_",
    "index" : "_slm"
  },
  "status" : 400
}

The API call:

PUT /_slm/policy/daily-snapshots
{
  "schedule": "0 15,30,45 * ? * *", 
  "name": "<custom-index-hourly-snap-{now/d}>", 
  "repository": "my_custom_repo", 
  "config": { 
    "indices": ["filebeat-custom-index-name*"], 
    "ignore_unavailable": false,
    "include_global_state": false
  },
  "retention": { 
    "expire_after": "30d", 
    "min_count": 5, 
    "max_count": 50 
  }
}

It seems system index _slm is not existing at all. I've managed to add a custom Repository to my ELK cluster and it's verification is going okay but sadly I can't create any policy via Kibana UI or an API which returns an error as show above.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.