# ILM issue

**URL:** <https://discuss.elastic.co/t/ilm-issue/274507>\
**Category:** Elasticsearch\
**Tags:** ilm-index-lifecycle-management\
**Created:** [May 31, 2021, 1:05pm UTC](https://discuss.elastic.co/t/ilm-issue/274507 "2021-05-31T13:05:27Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Saishantan\_goli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/saishantan_goli/32/86324_2.png) [@Saishantan\_goli](https://discuss.elastic.co/u/Saishantan_goli)\
**Post date:** [May 31, 2021, 1:05pm UTC](https://discuss.elastic.co/t/ilm-issue/274507/1 "2021-05-31T13:05:27Z")

</div>

Hi,

I am trying to set up an ILM policy for the data I am having in my ES.  
I am getting the below exception.

illegal\_argument\_exception: index name [logstash] does not match pattern '^.\*-\d+$'.

when I do

GET /\_aliases?pretty

I get (part of the output)

"logstash" : {  
"aliases" : {  
"lg-1" : { }  
}  
},

---

<div class="post-metadata">

**Author:** ![Saishantan\_goli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/saishantan_goli/32/86324_2.png) [@Saishantan\_goli](https://discuss.elastic.co/u/Saishantan_goli)\
**Post date:** [June 14, 2021, 5:53am UTC](https://discuss.elastic.co/t/ilm-issue/274507/2 "2021-06-14T05:53:31Z")

</div>

Any updates on this issue?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 14, 2021, 6:16am UTC](https://discuss.elastic.co/t/ilm-issue/274507/3 "2021-06-14T06:16:19Z")

</div>

How are you setting up the policy? Which version of the stack are you using?

---

<div class="post-metadata">

**Author:** ![andreidan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andreidan/32/78167_2.png) [@andreidan](https://discuss.elastic.co/u/andreidan)\
**Post date:** [June 14, 2021, 8:25am UTC](https://discuss.elastic.co/t/ilm-issue/274507/4 "2021-06-14T08:25:31Z")

</div>

I believe you're getting that error when rolling over? That's because your index name doesn't have the numerical ending (eg. `logstash-000001`).  
I believe your index bootstrapping was not correct either because the alias doesn't have the `is_write_index` option configured to true (see [Tutorial: Automate rollover with ILM | Elasticsearch Guide [7.13] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/getting-started-index-lifecycle-management.html#manage-time-series-data-without-data-streams) fro more details on bootstrapping).

Alternatively, use [data streams](https://www.elastic.co/guide/en/elasticsearch/reference/current/getting-started-index-lifecycle-management.html#getting-started-index-lifecycle-management) to avoid these bootstrapping and naming nuances.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 12, 2021, 8:25am UTC](https://discuss.elastic.co/t/ilm-issue/274507/5 "2021-07-12T08:25:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.