ILM reports error illegal_argument_exception

Elasticsearch version : 7.2.0
Installed by eck-operator: 0.9.0-rc7

Plugins installed : as installed by eck-operator version 0.9.0-rc7
docker.elastic.co/elasticsearch/elasticsearch:7.2.0

JVM version ( java -version ): as used in elasticsearch docker image

OS version ( uname -a if on a Unix-like system): Host OS: Ubuntu 16.04,
Linux 4.15.0-55-generic

Description of the problem including expected versus actual behavior :
The following options are used for deploying metricbeat helm chart - overwritten values below.

ILM reports the following error:
illegal_argument_exception: index.lifecycle.rollover_alias [metricbeat] does not point to index [metricbeat-nfs-provisioner-2019.08.09]

Steps to reproduce :

  1. install elasticsearch 7.2.0 using eck-operator at elasticsearch namespace.
    Default install with 2 nodes.

  2. install metricbeat using helm chart: stable/metricbeat with the following overwrite myvalues.yml:
    helm install -f myvalues.yml --name metric --namespace elasticsearch stable/metricbeat

myvalues.yml - > rename txt to yml
myvalues.txt

  1. Wait 2-5min to see error on kibana. It is not seen immediately.

I read https://www.elastic.co/guide/en/beats/metricbeat/current/ilm.html documentation and try to put setup.ilm.pattern: "{[kubernetes.pod._module.namespace]}-{now/d}-01"
but error is appeared: kubernetes.pod._module.namespace cannot be mapped to date format.

Goal is to create separate indices per namespace and control them via ILM policy.

Thank you! Slawek Wieczorkowski

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.