Facing issues with ILM on auto indexes

Elastic Stack Elasticsearch
2

Hi @rahul_sirugudi

I think You might have it slightly backwards :slight_smile:

Write alias is the generic name, it is also known as the rollover alias.
The specific index name is the concrete index

So yours would like something like this...

Then your filebeat would write to filebeat-7.17.8 and then when the index rolls over

Try this and you will see..

PUT filebeat-7.17.8-2023.01.09
{
  "aliases": {
    "filebeat-7.17.8":{
      "is_write_index": true 
    }
  }
}

POST filebeat-7.17.8/_rollover