ILM alias errors - illegal_argument_exception: index.lifecycle.rollover_alias

Elastic Stack Elasticsearch
1

Hi, am seeing this issue even though I believe the seed index was created with the correct write index:

illegal_argument_exception: index.lifecycle.rollover_alias [test-logs] does not point to index [test-logs-2022.08.17]

I'm trying to fix the issue without having to delete the indexes and red- the whole thing again. Here are the definitions used:

#GET  _template/test-logs_template
{
  "test-logs_template" : {
    "order" : 100,
    "index_patterns" : [
      "test-logs-*"
    ],
    "settings" : {
      "index" : {
        "lifecycle" : {
          "name" : "test_ILM_Policy",
          "rollover_alias" : "test-logs"
        },
        "routing" : {
          "allocation" : {
            "require" : {
              "box_type" : "hot"
            }
          }
        },
        "number_of_shards" : "1",
        "number_of_replicas" : "1"
      }
    },
    "mappings" : { },
    "aliases" : { }
  }
}
#GET _alias/test-logs
{
  "test-logs-2022.08.17-000006" : {
    "aliases" : {
      "test-logs" : {
        "is_write_index" : false
      }
    }
  },
  "test-logs-2022.08.03-000004" : {
    "aliases" : {
      "test-logs" : {
        "is_write_index" : false
      }
    }
  },
  "test-logs-2022.07.27-000003" : {
    "aliases" : {
      "test-logs" : {
        "is_write_index" : false
      }
    }
  },
  "test-logs-2022.08.10-000005" : {
    "aliases" : {
      "test-logs" : {
        "is_write_index" : false
      }
    }
  },
  "test-logs-2022.08.24-000007" : {
    "aliases" : {
      "test-logs" : {
        "is_write_index" : true
      }
    }
  }
}
#Seed index definition
PUT /%3Ctest-logs-%7Bnow%2Fd%7D-1%3E
{
    "aliases": {
    "test-logs": {
      "is_write_index": true
    }
  }
}
#Logstash output section
output {
    elasticsearch
    {
        hosts => ["es-test1:9200" , "es-test2:9200"]
        ilm_enabled => true
        ssl => true
        cacert => "path to .crt"
        ssl_certificate_verification => true
        user => logstash_user
        password => "${logstash.user.password}"
        sniffing => false
        manage_template => false
        index => "test-logs-%{+YYYY.MM.dd}"

    }
}

Thanks for your time!

2

Does Troubleshooting index lifecycle management errors | Elasticsearch Guide [8.4] | Elastic help?

3

Unfortunately, I couldn't pin point what the issue is. I do see the alias name defined in the index as it's baked into the template definition.

{
  "test-logs-2022.08.30" : {
    "settings" : {
      "index" : {
        "lifecycle" : {
          "name" : "test_ILM_Policy",
          "rollover_alias" : "test-logs"
        },
        "routing" : {
          "allocation" : {
            "require" : {
              "box_type" : "hot"
            }
          }
        },
        "refresh_interval" : "10s",
        "number_of_shards" : "1",
        "provided_name" : "test-logs-2022.08.30",
        "creation_date" : "1661871466525",
        "priority" : "100",
        "number_of_replicas" : "1",
        "uuid" : "mTKcQtrYRGG8ivMuhCX0RQ",
        "version" : {
          "created" : "7160399"
        }
      }
    }
  }
}
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.