Index Alias for rotating time based indices

index-lifecycle-management

(Justin Walz) #1

Hi,

The docs here (https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-aliases.html) are pretty explicit in that something like this:

POST /_aliases
{
    "actions" : [
        { "add" : { "index" : "test*", "alias" : "all_test_indices" } }
    ]
}

will not automatically update to include new indices that match.

If I'm using ILM or time based indices (filebeat, metricbeat) would I need to re-add this alias every time a new index is created, or is there a feature of ILM that would do this on my behalf? Right now I'm thinking the only way to do this would be a cronjob to update the alias on a schedule, or query for new indices and update when a new one is found.

Thanks,
Justin


(Lee Hinman) #2

If you are talking about rollover within an ILM policy, then the rollover action will update the alias automatically, you don't need to do that yourself.