As the event times index patterns are now deprecated we've been trying to migrate across to replacing them with wildcards. At the moment this is not working well, we have a number of clusters used by a number of different groups and we're finding that tags are often appended to indices with timestamps when they're reindexed or similar.
e.g.
finance-logs-2016.02.03
finance-logs-2016.02.03-temp
finance-logs-2016.02.03-pre-change
There are a number of reasons these indices are required and they're usually named in such a way to make use of existing index templates.
Is there going to be a way in the future to support more prescriptive index patterns other than just a wildcard *, or is there a way to do it today?