Use a dynamic index name with ILM

Elastic Stack Beats
1

I am trying to use Functionbeats for the first time and would like to know if it is possible to have the index name dynamically set based on the event payload?

I have tried:

setup.ilm.enabled: auto
setup.ilm.rollover_alias: "functionbeat-%{[my_custom_index]}"
setup.ilm.pattern: "{now/M{yyyy.MM}}-000001"

However, I get the following error:

failed to read the ilm rollover alias: key not found

2

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.