Error when trying to add a snapshot policy on ELK ECE

Hello!
I've encountered this error when I tried to add a snapshot policy to my ELK cluster (on ECE):

{
  "error" : {
    "root_cause" : [
      {
        "type" : "invalid_index_name_exception",
        "reason" : "Invalid index name [_slm], must not start with '_', '-', or '+'",
        "index_uuid" : "_na_",
        "index" : "_slm"
      }
    ],
    "type" : "invalid_index_name_exception",
    "reason" : "Invalid index name [_slm], must not start with '_', '-', or '+'",
    "index_uuid" : "_na_",
    "index" : "_slm"
  },
  "status" : 400
}

The API call:

PUT /_slm/policy/daily-snapshots
{
  "schedule": "0 15,30,45 * ? * *", 
  "name": "<custom-index-hourly-snap-{now/d}>", 
  "repository": "my_custom_repo", 
  "config": { 
    "indices": ["filebeat-custom-index-name*"], 
    "ignore_unavailable": false,
    "include_global_state": false
  },
  "retention": { 
    "expire_after": "30d", 
    "min_count": 5, 
    "max_count": 50 
  }
}

It seems system index _slm is not existing at all. I've managed to add a custom Repository to my ELK cluster and it's verification is going okay but sadly I can't create any policy via Kibana UI or an API which returns an error as show above.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.