I still consider myself very much a neophyte with ELK.
A few weeks ago I set up Lifecycle Policies for Indices in Kibana. I used the old index names the developers have hard coded into their programs.
But when it came time for the rollover I checked and found the rollover had failed in the check-rollover-ready step. I got the error message: illegal_argument_exception: index name [aapc.log-test] does not match pattern '^.*-\d+$'
I did some googling and learned that I should have named the indexes with a number at the end. So instead of aapc.log-test, I should have named it aapc.log-test-000001 - and set the alias to be aapc.log-test.
My question is: What is the best way to get there from here?
I understand you can't rename indexes. The easiest solution seems to be to delete the indexes and build new ones with new names and better aliases. But I'd rather not delete if I don't have to. Is there a better answer?