Hi there.
After upgrading to Filebeat 7.15 i get this error on filebeat setup
root@suricata:~# sudo filebeat setup
Overwriting ILM policy is disabled. Set `setup.ilm.overwrite: true` for enabling.
Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: 1 error: error setting index 'suricata-ids-*' in index pattern: empty index pattern
I dont want to use the default filebeat index and my config is like this (which was perfect on the previous version)
setup.ilm.enabled: auto
setup.ilm.rollover_alias: "suricata-ids" #Write your alias
setup.ilm.pattern: "{now/d}-000001"
setup.template.name: "suricata-ids"
setup.template.pattern: "suricata-ids-*"
setup.dashboards.index: "suricata-ids-*"