I have an index_pattern called metricbeat- * which I create an alias called alias_metricbeat. Through the elasticsearch API I want to condition so that certain users do not perform filters of more than three months in the boards, someone can tell me how I can do it, thank you.
My template is:
PUT _template/demoalias
{
"index_patterns" : [
"matricbeat-*"
],
"aliases": {
"alias_metricbeat": {}
},
"mappings": {},
"settings" : {
"index" : {
"codec" : "best_compression",
"refresh_interval" : "5s",
"number_of_shards": "5",
"number_of_replicas": "1",
"lifecycle.name": "lifecycle_metricbeat",
"lifecycle.rollover_alias": "lifecycle_metricbeat_rollover"
}
}
}