# Indexes aren't being autocreated

**URL:** <https://discuss.elastic.co/t/indexes-arent-being-autocreated/189633>\
**Category:** Elasticsearch\
**Created:** [July 9, 2019, 10:13pm UTC](https://discuss.elastic.co/t/indexes-arent-being-autocreated/189633 "2019-07-09T22:13:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nijave](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nijave/32/49737_2.png) [@nijave](https://discuss.elastic.co/u/nijave)\
**Post date:** [July 9, 2019, 10:13pm UTC](https://discuss.elastic.co/t/indexes-arent-being-autocreated/189633/1 "2019-07-09T22:13:06Z")

</div>

I have logstash outputting data to Elasticsearch but it created the first index and hasn't created any since. I created a VM with logstash/elasticsearch with this ansible playbook [https://pastebin.com/innbMN4p](https://pastebin.com/innbMN4p)

/etc/elasticsearch/elasticsearch.yml

```
cluster.initial_master_nodes: elk01
cluster.name: logs
http.port: 9200
network.host: 0.0.0.0
node.master: true
node.name: elk01
transport.port: 9300

#################################### Paths ####################################

# Path to directory containing configuration (this file and logging.yml):
path.data: /opt/elasticsearch/data
path.logs: /var/log/elasticsearch
action.auto_create_index: true

```

/etc/logstash/conf.d/logstash.conf

```
input {
  beats {
    ssl => false
    host => "::"
    port => 5044
  }

  http {
    ssl => false
    host => "::"
    port => 8888
  }

  udp {
    host => "::1"
    port => 10514
    codec => "json"
    type => "rsyslog"
  }
}

output {
  elasticsearch {
    hosts => ["http://localhost:9200"]
    index => "logstash-%{+YYYY.MM.dd}"
    # index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
  }
}

```

The original index was "logstash-2019.07.02-000001" which seems strange as well--not sure where it got that suffix from

---

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [July 9, 2019, 10:27pm UTC](https://discuss.elastic.co/t/indexes-arent-being-autocreated/189633/2 "2019-07-09T22:27:01Z")

</div>

Versions 7.0 and beyond use ILM by default. The default policy probably isn't doing daily rollover.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 6, 2019, 10:27pm UTC](https://discuss.elastic.co/t/indexes-arent-being-autocreated/189633/3 "2019-08-06T22:27:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.