I"m currently using stack 7.1.1, I've having trouble getting logstash to append the YYYY-MM-DD to indexes after enabling Index Lifecycle Managment (ILM)
As you are using rollover, a sequence number must be added as multiple indices can be created per day. This is why you get a sequence number in addition to the date.
It is not the ILM index pattern, it is due to you using rollover. As far as I know you can use ILM with standard daily indices that do not have the incremental suffix. When using rollover it is generally not required to have a date in the index name as both ILM and Curator can handle aging based on the index data and do not need the name. If you want to have date in name and use rollover I do believe the sequence number will continually increase and not reset every day as rollover does not consider the date part of the name.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.