Is it safe to modify system index template settings?

Elastic Stack Elasticsearch
1

I have a single node installation. This leads to an yellow/unhealthy status when indices have replication configured. In my case there are these system indices which cause problems:

.internal.alerts-observability.logs.alerts-default-*
.siem-signals-default-*

When I attempt to edit the template setting for these indices I get a warning that this could break Kibana. Is it safe to just deactivate replication?

2

It depends. You can do it, but they will be overwritten when you upgrade.

What version are you running?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.