ILM multiple aliases

Elastic Stack Elasticsearch
1

Hi
Some context first: I have multiple beats (metric, audit, heart ....), and making use of the common schema, and make the elastic to store the events on a single common index, in this case an index called simply beats-*.
To manage the retention of this index, I make use of an ILM policy with the alias of beats.

The problem I run into, is that when I want to use the uptime plugin in Kibana, this plugin expects the events in an index of the form heartbeat-7 (I'm using elasticsearch 7.3), so I create an alias to that indices like this:

POST _aliases/
{
    "actions" : [
        { "add" : { "index" : "beats*", "alias" : "heartbeat-7" } }
    ]
}

That statement make an alias to beats-000001, beats-000002, and so on. And the uptime Plugin don't know in what index search.
So I tried to make an Alias pointing to the alias of the ILM

POST /_aliases
{
    "actions" : [
        { "add" : { "index" : "beats", "alias" : "heartbeat-7" } }
    ]
}

Also that failed too with an exception

The question is: there's a way to tell the ILM to rotate with multiples alias to the last index?
If not, anybody knows a workaround to this problem?

Thanks in advance
regards

Rod

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.