# Metricbeat getting error on illegal\_argument\_exception: index.lifecycle.rollover\_alias

**URL:** <https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [October 24, 2020, 1:10pm UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206 "2020-10-24T13:10:23Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Beng\_Hui\_Ong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/beng_hui_ong/32/63772_2.png) [@Beng\_Hui\_Ong](https://discuss.elastic.co/u/Beng_Hui_Ong)\
**Post date:** [October 24, 2020, 1:10pm UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206/1 "2020-10-24T13:10:23Z")

</div>

Hi folks, I keep getting this error on my metricbeat setup, and despite me shutting down and recreate all the index and policies, it will still pop up.

illegal\_argument\_exception: index.lifecycle.rollover\_alias [metricbeat-7.9.2] does not point to index [metricbeat-7.9.2-2020.10.24]

Any workaround ?

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [October 26, 2020, 9:25am UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206/2 "2020-10-26T09:25:07Z")

</div>

Hi!

Can you share your Metricbeat config file?

---

<div class="post-metadata">

**Author:** ![Beng\_Hui\_Ong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/beng_hui_ong/32/63772_2.png) [@Beng\_Hui\_Ong](https://discuss.elastic.co/u/Beng_Hui_Ong)\
**Post date:** [October 28, 2020, 1:19am UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206/3 "2020-10-28T01:19:01Z")

</div>

Hi Chris,

Here is the config

`  
metricbeat.config.modules:  
path: ${path.config}/modules.d/\*.yml  
reload.enabled: false

setup.template.settings:  
index.number\_of\_shards: 1  
index.codec: best\_compression

setup.kibana:  
host: "localhost:5601"

output.elasticsearch:  
hosts: ["172.16.1.1:9200"]

processors:

- add\_host\_metadata: ~
- add\_cloud\_metadata: ~
- add\_docker\_metadata: ~
- add\_kubernetes\_metadata: ~

monitoring.enabled: true  
monitoring.cluster\_uuid: 1SHTio1JRw2EEVDzyLhxxx  
monitoring.elasticsearch:  
hosts: ["[https://172.16.1.1:9200](https://172.16.1.1:9200)", "[https://172.16.1.2:9200](https://172.16.1.2:9200)"]

setup.ilm.overwrite: true  
logging.metrics.enabled: false  
http.enabled: true  
`

---

<div class="post-metadata">

**Author:** ![Beng\_Hui\_Ong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/beng_hui_ong/32/63772_2.png) [@Beng\_Hui\_Ong](https://discuss.elastic.co/u/Beng_Hui_Ong)\
**Post date:** [October 28, 2020, 1:28am UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206/4 "2020-10-28T01:28:26Z")

</div>

Hope this helps as well...

Oct 28 09:26:56 starlite metricbeat: 2020-10-28T09:26:56.890+0800#011INFO#011[publisher\_pipeline\_output]#011pipeline/output.go:143#011Connecting to backoff(elasticsearch([http://172.16.1.1:9200](http://172.16.1.1:9200)))  
Oct 28 09:26:56 starlite metricbeat: 2020-10-28T09:26:56.890+0800#011INFO#011[publisher]#011pipeline/retry.go:219#011retryer: send unwait signal to consumer  
Oct 28 09:26:56 starlite metricbeat: 2020-10-28T09:26:56.890+0800#011INFO#011[publisher]#011pipeline/retry.go:223#011 done  
Oct 28 09:26:56 starlite metricbeat: 2020-10-28T09:26:56.893+0800#011INFO#011[esclientleg]#011eslegclient/connection.go:314#011Attempting to connect to Elasticsearch version 7.9.2  
Oct 28 09:26:56 starlite metricbeat: 2020-10-28T09:26:56.939+0800#011INFO#011[license]#011licenser/es\_callback.go:51#011Elasticsearch license: Basic  
Oct 28 09:26:56 starlite metricbeat: 2020-10-28T09:26:56.940+0800#011INFO#011[esclientleg]#011eslegclient/connection.go:314#011Attempting to connect to Elasticsearch version 7.9.2  
Oct 28 09:26:56 starlite metricbeat: 2020-10-28T09:26:56.981+0800#011INFO#011[index-management]#011idxmgmt/std.go:261#011Auto ILM enable success.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.036+0800#011INFO#011[index-management]#011idxmgmt/std.go:274#011ILM policy successfully loaded.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.036+0800#011INFO#011[index-management]#011idxmgmt/std.go:407#011Set setup.template.name to '{metricbeat-7.9.2 {now/d}-000001}' as ILM is enabled.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.036+0800#011INFO#011[index-management]#011idxmgmt/std.go:412#011Set setup.template.pattern to 'metricbeat-7.9.2-\*' as ILM is enabled.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.036+0800#011INFO#011[index-management]#011idxmgmt/std.go:446#011Set settings.index.lifecycle.rollover\_alias in template to {metricbeat-7.9.2 {now/d}-000001} as ILM is enabled.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.036+0800#011INFO#011[index-management]#011idxmgmt/std.go:450#011Set settings.index.lifecycle.name in template to {metricbeat {"policy":{"phases":{"hot":{"actions":{"rollover":{"max\_age":"30d","max\_size":"50gb"}}}}}}} as ILM is enabled.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.037+0800#011INFO#011template/load.go:89#011Template metricbeat-7.9.2 already exists and will not be overwritten.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.038+0800#011INFO#011[index-management]#011idxmgmt/std.go:298#011Loaded index template.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.038+0800#011INFO#011[index-management]#011idxmgmt/std.go:309#011Write alias successfully generated.  
Oct 28 09:26:57 starlite metricbeat: 2020-10-28T09:26:57.039+0800#011INFO#011[publisher\_pipeline\_output]#011pipeline/output.go:151#011Connection to backoff(elasticsearch([http://172.16.1.1:9200](http://172.16.1.1:9200))) established

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [October 29, 2020, 10:45am UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206/5 "2020-10-29T10:45:49Z")

</div>

Hey!

It should be the combination of `setup.ilm.overwrite: true` and setting up the template.  
I would suggest either removing `ilm` if not needed or try to manually define the required settings for `template` section: [https://www.elastic.co/guide/en/beats/metricbeat/current/configuration-template.html](https://www.elastic.co/guide/en/beats/metricbeat/current/configuration-template.html)

C.

---

<div class="post-metadata">

**Author:** ![Beng\_Hui\_Ong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/beng_hui_ong/32/63772_2.png) [@Beng\_Hui\_Ong](https://discuss.elastic.co/u/Beng_Hui_Ong)\
**Post date:** [October 30, 2020, 9:16am UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206/6 "2020-10-30T09:16:27Z")

</div>

Thanks for the advice. Will try that.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 27, 2020, 11:16am UTC](https://discuss.elastic.co/t/metricbeat-getting-error-on-illegal-argument-exception-index-lifecycle-rollover-alias/253206/7 "2020-11-27T11:16:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
