ILM template and index pattern

Elastic Stack Kibana
1

Hi friend, my architecture is filebeat will send data to logstash. Logstash will send data to Kibana and kibana will visualize. My index is like below

Myindex-team1
Myindex-team2
Myindex-team3
Yourindex-team1
Yourindex-team2
Yourindex-team3

Can I know if I set template My* , and attach it to rollover policy. Will my index name changed based on size? What is default rollover name and his I can. Change it?

2

you should use Myindex* as alias

if you use My* then you won't be able to have seperate index with My(anything) as this ILM will impact that

3

Thanks for the reply. I have updated. I am expecting as below for rollover

Myindex-team1-yyyyMMdd
Myindex-team2-yyyyMMdd
Myindex-team3-yyyyMMdd
Yourindex-team1-yyyyMMdd
Yourindex-team3-yyyyMMdd

Should I create 6 template?

4

no one template should take care all. and one ILM take cares all. when your index reaches to X limit (depend on your ILM) parameter it will create new index
you use myindex to write and elk will write to that myindex-xxxx (newest one)

5

Is it possible for myindex-team1-xxxxxx? If I want this care how many template I need ya. Can I use 1 or need many for each. What will be the xxx pattern? How can I change it

6

Sherabu
please post your ilm and template configuration

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.