# Index Life cycle Policy indexes not roll overing **URL:** \ **Category:** Elasticsearch\ **Created:** [January 25, 2021, 12:17pm UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102 "2021-01-25T12:17:51Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [January 25, 2021, 12:17pm UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/1 "2021-01-25T12:17:51Z")
Hi, I'm facing some problem in Index life cycle policy in which indexes are not roll overing and delete phase is not working. Is there is a best practice to do so? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 27, 2021, 8:15am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/2 "2021-01-27T08:15:35Z")
It would help if you showed your policy as well as indices stats. ---
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [January 28, 2021, 4:13am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/3 "2021-01-28T04:13:01Z")
![ELK_ind](https://us1.discourse-cdn.com/elastic/original/3X/a/3/a3546dbbbc6b32fa521898d963b37b354b70ac0e.png) Applied Life Cycle Policy for metricbeat-7.6.2-000001. Life Cycle Policy contains Hot phase and Delete phase. Once size increased index pattern will rollover to metricbeat-7.6.2-000002 and it is not deleting the first index. So that the size is increasing in metricbeat-7.6.2-000001. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 28, 2021, 6:37am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/4 "2021-01-28T06:37:43Z")
How are you sending data to the index? Are you writing to the write alias? ---
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [January 28, 2021, 11:10am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/5 "2021-01-28T11:10:05Z")
Yes.. ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/3/43ab74936c5e23eb18292d7cf64a5a02c897f8a7.png) ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 28, 2021, 12:27pm UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/6 "2021-01-28T12:27:04Z")
What does your Metricbeat config look like? ---
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [January 28, 2021, 12:33pm UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/7 "2021-01-28T12:33:34Z")
Here the metricbeat-7.6.2-000001 is the index pattern name. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 28, 2021, 12:42pm UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/8 "2021-01-28T12:42:11Z")
That is not the write alias so is the reason it is not working. ---
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [January 29, 2021, 4:55am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/9 "2021-01-29T04:55:15Z")
Can you please help me out with the right one ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 29, 2021, 5:10am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/10 "2021-01-29T05:10:36Z")
Have a look at [this guide to setting up an ILM policy](https://www.elastic.co/guide/en/elasticsearch/reference/7.10/set-up-lifecycle-policy.html#ilm-policy-definition). When you create the first index you specify a write index alias (`test-alias` in the example in the docs I linked to). This is what you configure Logstash and/or Metricbeat to write to, not the actual index name. This will allow the alias to move to a new index once rollover happens. ---
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [January 29, 2021, 11:00am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/11 "2021-01-29T11:00:55Z")
Thankyou ---
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [February 2, 2021, 4:15am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/12 "2021-02-02T04:15:41Z")
![image](https://us1.discourse-cdn.com/elastic/original/3X/3/1/31c101a7e027dad24b54d317e046575c74ab5af7.png) When I tried to give the aliases as per the documentation it showing some error(Invalid JSON format)....Please help me to rectify the error. ---
**Author:** ![Anu6006](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@Anu6006](https://discuss.elastic.co/u/Anu6006)\ **Post date:** [February 2, 2021, 5:22am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/13 "2021-02-02T05:22:31Z")
![Capture1](https://us1.discourse-cdn.com/elastic/original/3X/7/f/7f8fbcea7797b8bd3c08f941d2366190387a999b.png) Here the data is pushing through the logstash by using **index =\> "%{[@metadata][beat]}-%{[@metadata][version]}-000001"**. As it is passing through the logstash, rollovering is happening but it is not deleting the old index and it is keep on adding the size of the old index. Whether I need to change anything in this **config. file**. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 2, 2021, 5:23am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-indexes-not-roll-overing/262102/14 "2021-03-02T05:23:03Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.