# Puzzled about updating Indexes

**URL:** <https://discuss.elastic.co/t/puzzled-about-updating-indexes/55425>\
**Category:** Elasticsearch\
**Created:** [July 13, 2016, 4:00pm UTC](https://discuss.elastic.co/t/puzzled-about-updating-indexes/55425 "2016-07-13T16:00:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Zorkmid](https://avatars.discourse-cdn.com/v4/letter/z/e68b1a/32.png) [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\
**Post date:** [July 13, 2016, 4:00pm UTC](https://discuss.elastic.co/t/puzzled-about-updating-indexes/55425/1 "2016-07-13T16:00:03Z")

</div>

Hello All,

This simple question that probably has a simple answer.  
I'm working with WinLogBeat on a WIndows based testing device that is setup to send events to a raspberry pi running logstash. In turn the raspberry pi sends the events to an ELK instance.  
This all works with the exception of working with the indexes in Kibana and this may be a simple config problem on my end.

What I've noticed is that even though Winlogbeat is transmitting to logstash and logstash is sending to ELK the index has to be manually created each time. Almost as if the index from the previous time period has aged out or rolled over and ELK has failed to dynamically create a new one. Is this normal behavior and can the index be created dynamically or on a scheduled basis?

Thanks  
TimW

---

<div class="post-metadata">

**Author:** ![cheruvian](https://avatars.discourse-cdn.com/v4/letter/c/48db29/32.png) [@cheruvian](https://discuss.elastic.co/u/cheruvian)\
**Post date:** [July 14, 2016, 3:47am UTC](https://discuss.elastic.co/t/puzzled-about-updating-indexes/55425/2 "2016-07-14T03:47:12Z")

</div>

The default is to enable auto creation of indices, though you can disable it by configuring your settings with:

```
action.auto_create_index: false

```

[https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-index\_.html#index-creation](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-index_.html#index-creation)

I would double check your config file on each node and verify this isn't set.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:35pm UTC](https://discuss.elastic.co/t/puzzled-about-updating-indexes/55425/3 "2017-07-05T22:35:53Z")

</div>


