I can't figure out what I should be setting rollover_alias to

Elastic Stack Elasticsearch
1

put another way I don't understand the function of rollover_alias and I can't find an explanation in the docs. My managed indices keep failing with errors like this: illegal_argument_exception: index.lifecycle.rollover_alias [dns_managed] does not point to index [dns_managed]
where dns_managed is the name of the index which is matched by the template

PUT _template/dns?include_type_name
{
  "version": 1,
  "order": 0,
  "index_patterns": [
    "dns_m*"
  ],
  "settings": {
    "index": {
      "lifecycle": {
        "name": "dns_logs",
        "rollover_alias": "dns_managed"
      },
      "number_of_shards": "2"
    }
  },
  "aliases": {
    "dns_query": {}
  },
  "mappings": {
    "_doc": {
      "properties": {
        "dns_query": {
          "type": "text"
        },
        "ip": {
          "type": "ip"
        },
        "timepstamp": {
          "format": "8yyyy-MMM-dd HH:mm:ss.SSS X",
          "type": "date"
        }
      }
    }
  }
}
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.