Understand ILM (shrink index)

[elasticforme (Sachin)]

I have used ILM policy on my metricbeat data and used shrink option.

which worked and created new index called
shrink-anre-metricbeat-7.15.0-2021.10.06-000010

but my index pattern is called "metricbeat-*" how does it accessing that index which is not falling in to this pattern?

I am trying to understand how is it working?

yes I can see the data which are located on that shrink index on my dashboard.

[warkolm (Mark Walkom)]

From Shrink | Elasticsearch Guide [7.15] | Elastic;

After the shrink action, any aliases that pointed to the source index point to the new shrunken index.

So you should be able to see that in _cat/aliases.

[elasticforme (Sachin)]

Hi Mark,
ok good I see on _cat/aliases I see that my metricbeat-* now also has shrink-* indices

but how did it got there? I didn't touch it. did ILM set that up?

[warkolm (Mark Walkom)]

Yep, ILM handles that.

[elasticforme (Sachin)]

ohhh ok. got it that is what I was trying to find out how it is being done.
once I know then if there is problem I can start debugging properly