# Need to setup rollover on indexes in elasticsearch

**URL:** <https://discuss.elastic.co/t/need-to-setup-rollover-on-indexes-in-elasticsearch/240516>\
**Category:** Elasticsearch\
**Tags:** ilm-index-lifecycle-management\
**Created:** [July 9, 2020, 11:10am UTC](https://discuss.elastic.co/t/need-to-setup-rollover-on-indexes-in-elasticsearch/240516 "2020-07-09T11:10:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![manjeetsingh](https://avatars.discourse-cdn.com/v4/letter/m/4af34b/32.png) [@manjeetsingh](https://discuss.elastic.co/u/manjeetsingh)\
**Post date:** [July 9, 2020, 11:10am UTC](https://discuss.elastic.co/t/need-to-setup-rollover-on-indexes-in-elasticsearch/240516/1 "2020-07-09T11:10:39Z")

</div>

Hi,  
I am looking for help in rollover indexes using ILM policy on existing indexes.  
I have created one policy with below parameters

{  
"rollup-policy" : {  
"version" : 1,  
"modified\_date" : "2020-07-09T10:48:54.921Z",  
"policy" : {  
"phases" : {  
"hot" : {  
"min\_age" : "0ms",  
"actions" : {  
"rollover" : {  
"max\_size" : "5kb",  
"max\_age" : "15m"  
},  
"set\_priority" : {  
"priority" : 100  
}  
}  
},  
"delete" : {  
"min\_age" : "1d",  
"actions" : {  
"delete" : {  
"delete\_searchable\_snapshot" : true  
}  
}  
}  
}  
}  
}  
}

and attached it index template which I created earlier having below settings:-

{  
"field-log-type\_template" : {  
"order" : 7,  
"version" : 1,  
"index\_patterns" : [  
"fields.log\_type"  
],  
"settings" : {  
"index" : {  
"lifecycle" : {  
"name" : "rollup\_policy",  
"rollover\_alias" : "fields.log\_type-roll-00001"  
},  
"number\_of\_shards" : "1",  
"number\_of\_replicas" : "1"  
}  
},  
"mappings" : {  
"\_meta" : { },  
"\_source" : { },  
"properties" : { }  
},  
"aliases" : { }  
}  
}

I am running filebeat on nodes and have setup template named as defined above with pattern below  
output.elasticsearch:

# Array of hosts to connect to.

hosts: ["10.242.6.69:9200"]  
index: "%{[fields.log\_type]}"

setup.template:  
name: "field-log-type\_template"  
pattern: "fields.log\_type"

setup.ilm.enabled: false

Also log defined in filebeat.yml as below

- type: log  
enabled: true  
paths:
  - /var/log/elasticsearch/elasticsearch.log  
fields:  
log\_type: elk-logs

So we want to rollover all indexes with alias fields.log\_type-roll-00001

Now Index are creating with defined pattern but rollover didn't happen as per policy.  
Can somebody help me in this.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 6, 2020, 11:10am UTC](https://discuss.elastic.co/t/need-to-setup-rollover-on-indexes-in-elasticsearch/240516/2 "2020-08-06T11:10:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.