@stephenb Thank you for the update, i tried to update the alias and recreated the index to match todays date.
I am getting a different error this time " "reason" : "index name [wazuh-alerts-4.x-2021.12.15] does not match pattern '^.*-\\d+$'"
I see similar issue raised in the below post.
Hi,
I just created an alias which name is "squid-log-alias" for my index "squid-log", and when I setup rollover API and I got the error:
POST /squid-log-alias/_rollover
{
"conditions":{
"max_age": "7d",
"max_docs": 1000
}
}
{
"error": {
"root_cause": [
{
"type": "illegal_argument_exception",
"reason": "index name [squid-log] does not match pattern '^.-\d+$'"
}
],
"type": "illegal_argument_exception",
"reason": "index name [squid-log] does not match pattern '^.-\d+$'"
},
"sta…
Do we need the increment number after the index to rollover ? I am fine to clear out the settings and start fresh if that helps.