ILM and alias confusion

Ok, if there is an index "firewall-traffic", it was probably created when the config wasn't "perfect". It won't let an alias exist with that name. You'll have to delete that index or use a different alias. If the index is empty, just delete it.

You'll probably need to restart logstash after removing the index--alias conflict.