Hello everybody,
To begin I am sorry if it's a simple error that I couldn't solve as I just began working with elastic Stack
I am getting exceptions in elasticsearch logs [2020-05-25T11:41:07,095][ERROR][o.e.x.i.IndexLifecycleRunner] [ludonics] policy [auditbeat] for index [auditbeat-7.6.2-2020.05.08] failed on step [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}]. Moving to ERROR step java.lang.IllegalArgumentException: index.lifecycle.rollover_alias [auditbeat-7.6.2] does not point to index [auditbeat-7.6.2-2020.05.08] at org.elasticsearch.xpack.core.ilm.WaitForRolloverReadyStep.evaluateCondition(WaitForRolloverReadyStep.java:104) [x-pack-core-7.6.2.j
GET _ilm/policy/auditbeat
` {
"auditbeat" : {
"version" : 1,
"modified_date" : "2020-04-24T09:27:43.631Z",
"policy" : {
"phases" : {
"hot" : {
"min_age" : "0ms",
"actions" : {
"rollover" : {
"max_size" : "50gb",
"max_age" : "30d"
}
}
}
}
}
}
}
GET _template/auditbeat-7.6.2
{
"auditbeat-7.6.2" : {
"order" : 1,
"index_patterns" : [
"auditbeat-7.6.2-*"
],
"settings" : {
"index" : {
"lifecycle" : {
"name" : "auditbeat",
"rollover_alias" : "auditbeat-7.6.2"
},
"mapping" : {
"total_fields" : {
"limit" : "10000"
}
},
"refresh_interval" : "5s",
"number_of_routing_shards" : "30",
"number_of_shards" : "1",
"query" : {
"default_field" : [ ........
GET _cat/aliases
packetbeat-7.6.2 packetbeat-7.6.2-2020.05.23-000002 - - - true
logstash logstash-2020.05.13-000001 - - - true
.kibana_task_manager .kibana_task_manager_1 - - - -
auditbeat-7.6.2 auditbeat-7.6.2-2020.05.24-000002 - - - true
filebeat-7.6.2 filebeat-7.6.2-2020.05.14-000001 - - - true
ilm-history-1 ilm-history-1-000002 - - - true
metricbeat-7.6.2 metricbeat-7.6.2-2020.04.23-000001 - - - false
metricbeat-7.6.2 metricbeat-7.6.2-2020.05.23-000002 - - - true
ilm-history-1 ilm-history-1-000001 - - - false
packetbeat-7.6.2 packetbeat-7.6.2-2020.04.23-000001 - - - false
auditbeat-7.6.2 auditbeat-7.6.2-2020.04.24-000001 - - - false
.kibana .kibana_1 - - - -
`