# Index Alias stopped receiving data

**URL:** <https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834>\
**Category:** Elasticsearch\
**Created:** [December 7, 2018, 3:22am UTC](https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834 "2018-12-07T03:22:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rueldu](https://avatars.discourse-cdn.com/v4/letter/r/e36b37/32.png) [@rueldu](https://discuss.elastic.co/u/rueldu)\
**Post date:** [December 7, 2018, 3:22am UTC](https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834/1 "2018-12-07T03:22:30Z")

</div>

Hello, i need help. This is my case:

I am receiving flow data from two firewalls to the logstash and indexing with the names:  
Branch1= Index1  
Branch2= Index2

 ![53%20PM](https://us1.discourse-cdn.com/elastic/original/3X/e/d/edf2e6896888288f6a10c482e070955cc2984848.png)

Now I have created an index alias:  
AliasIndex = Branch1 + Branch2

and everything worked great until yesterday just at 7 PM exactly I stop receiving data from my Aliasindex. Then I went back to delete the aliasindex and index it again and it started to work.

Today is the same problem, just at 7 PM I stop receiving data in my INDEXALIAS

 ![07%20PM](https://us1.discourse-cdn.com/elastic/original/3X/f/9/f9323f21fb7666ea13b19d6a3b476c5b325fef18.png)

and I do not know how to solve this problem.

It should be noted that Index1 and Index2 continue to receive data without any problem.

Thank for the help.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 7, 2018, 3:36am UTC](https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834/2 "2018-12-07T03:36:46Z")

</div>

I am not sure I understand your scenario fully as you have masked the index names. As far as I recall, an alias can only be.indexed into if it has a one-to-one mapping with an underlying index. If you automatically assign new indices to the alias, this could therefore cause it to turn read-only.

---

<div class="post-metadata">

**Author:** ![rueldu](https://avatars.discourse-cdn.com/v4/letter/r/e36b37/32.png) [@rueldu](https://discuss.elastic.co/u/rueldu)\
**Post date:** [December 7, 2018, 3:47am UTC](https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834/3 "2018-12-07T03:47:27Z")

</div>

Thank Christian for that. I already saw what the problem is, automatically the alias does not add the new generated indexes, so I have to add them to the manually \>.\<

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 4, 2019, 3:47am UTC](https://discuss.elastic.co/t/index-alias-stopped-receiving-data/159834/4 "2019-01-04T03:47:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.