# Filebeat index ILM error
**URL:** https://discuss.elastic.co/t/filebeat-index-ilm-error/321320
**Category:** Beats
**Tags:** ilm-index-lifecycle-management, filebeat
**Created:** [December 15, 2022, 3:01pm UTC](https://discuss.elastic.co/t/filebeat-index-ilm-error/321320 "2022-12-15T15:01:12Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)
#### Post date: [December 15, 2022, 3:01pm UTC](https://discuss.elastic.co/t/filebeat-index-ilm-error/321320/1 "2022-12-15T15:01:12Z")
> Blockquote
Hi Team ,
We are getting below error in elasticsearch ILM error :
> Blockquote
illegal\_argument\_exception: index.lifecycle.rollover\_alias [filebeat-7.17.1] does not point to index [filebeat-7.17.1-o365-2022.10.06]illegal\_argument\_exception: index.lifecycle.rollover\_alias [filebeat-7.17.1] does not point to index [filebeat-7.17.1-o365-2022.10.06]
> Blockquote
We are shipping data from filebeats -\> elasticsearch.
We are not using Logstash in between.
The data is flowing from filebeat to elasticsearch enabled by modules (ex: o365).
This is the output configuration provided in filebeat.yml .However alias is not getting created which cause error in ILM.
Output section:
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["10.x.x.x:9200","10.x.x.x:9200","10.x.x.x:9200", "10.x.x.x:9200"]
indices:
```
- index: "filebeat-%{[agent.version]}-o365-%{+yyyy.MM.dd}"
when.contains:
event.module: "o365"
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 12, 2023, 5:01pm UTC](https://discuss.elastic.co/t/filebeat-index-ilm-error/321320/2 "2023-01-12T17:01:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.