I use "indices" syntax to create a different indexes based on a module name. I want to apply different ilm policy based on index name? How can I achieve that? indices: - index: "filebeat-netflow-%{+yyyy.MM.dd}" when.equals: event.module: "netflow" - index: "filebeat-cisco…

Setting different ilm policy based on index name

Adriann (Adrian) May 27, 2020, 12:36pm 4

I still get

"type" : "illegal_argument_exception",
        "reason" : "index.lifecycle.rollover_alias [filebeat-cisco] does not point to index [filebeat-cisco-2020.05.27]"

but i think adding -000001 to index will resolve the issue

Topic		Replies	Views
Change Index name with enabled ILM Beats filebeat	9	2173	June 23, 2020
Enable ILM for different filebeat indices Elasticsearch ilm-index-lifecycle-management	2	383	October 29, 2020
Elastic ILM Filebeat Beats filebeat	5	265	December 5, 2023
Dynamic Beat Index with ILM Beats ilm-index-lifecycle-management , beats-module , filebeat	3	323	September 27, 2021
ILM policy for filebeats through config file Beats ilm-index-lifecycle-management , filebeat	1	1532	July 29, 2021

Setting different ilm policy based on index name

Related topics