Hi,
I noticed this error last week on our elastic illegal_argument_exception: setting [index.lifecycle.rollover_alias] for index [test-2022.01.07] is empty or not defined
I did some research and found this article on the elastic documentation
Tutorial: Automate rollover with ILM | Elasticsearch Guide [7.16] | Elastic
After reviewing the documentation, I applied the changes by setting the rollover alias. Now if I query elastic for my test index template, I get the following;
PUT _index_template/test/
{
"index_patterns" : [
"test-*"
],
"template" : {
"settings" : {
"index" : {
"lifecycle" : {
"name" : "unity_index_ilm_policy",
"rollover_alias": "test_rollover"
},
"number_of_shards" : "3",
"number_of_replicas" : "3"
}
},
"mappings" : {
"properties" : {
"serviceComponent" : {
"fielddata" : true,
"type" : "text"
},
"serverName" : {
"fielddata" : true,
"type" : "text"
},
"source" : {
"fielddata" : true,
"type" : "text"
},
"serverPort" : {
"type" : "integer"
},
"serviceProcessId" : {
"type" : "integer"
},
"duration" : {
"type" : "integer"
},
"identityDelegate" : {
"fielddata" : true,
"type" : "text"
},
"result" : {
"fielddata" : true,
"type" : "text"
},
"serviceVersion" : {
"fielddata" : true,
"type" : "text"
},
"dataClassification" : {
"fielddata" : true,
"type" : "text"
},
"identity" : {
"fielddata" : true,
"type" : "text"
},
"requestId" : {
"fielddata" : true,
"type" : "text"
},
"resultReason" : {
"fielddata" : true,
"type" : "text"
},
"action" : {
"fielddata" : true,
"type" : "text"
},
"correlationId" : {
"fielddata" : true,
"type" : "text"
},
"details" : {
"fielddata" : true,
"type" : "text"
},
"class" : {
"fielddata" : true,
"type" : "text"
},
"serviceRealm" : {
"fielddata" : true,
"type" : "text"
},
"messageId" : {
"fielddata" : true,
"type" : "text"
},
"messageRole" : {
"fielddata" : true,
"type" : "text"
},
"requestRole" : {
"fielddata" : true,
"type" : "text"
},
"correlationRole" : {
"fielddata" : true,
"type" : "text"
},
"serviceName" : {
"fielddata" : true,
"type" : "text"
},
"target" : {
"fielddata" : true,
"type" : "text"
},
"@timestamp" : {
"type" : "date"
},
"clientIp" : {
"type" : "ip"
},
"serviceEnvironment" : {
"fielddata" : true,
"type" : "text"
},
"serverIp" : {
"type" : "ip"
},
"xForwardedFor" : {
"type" : "ip",
"ignore_malformed": true
},
"category" : {
"fielddata" : true,
"type" : "text"
}
}
},
"aliases": {
"test_rollover":{
"is_write_index": true
}
}
},
"composed_of" : [
"severity",
"schemaversion"
]
}
Today, I am seeing the same error under Index Management indices tab.
Is there anything else I should change?
Thanks