ILM policies for multiple auto-generated indexes

Elastic Stack Elasticsearch
1

Hi Team,

I have a logstash which is sending data streams to indexes created automatically in the process over Elasticsearch.

We have configured Logstash output section with index configuration as index => "applogs-%{[fields][TEAM_ID]}-000001" and routing data to respective teams.

I created ILM policy and Templates. But facing issue while creating alias as the index will follow the pattern like:
applogs-team1-000001
applogs-team2-000001
.
.
applogs-team100-000001.

Please advise how we can plan the ILM rollout in such scenarios.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.