X-pack logs index template

Elastic Observability Logs
1

I'm trying to get my cluster to work with x-pack, and my data is stored in indexes under the namespace logs-*-*.

This is a problem because x-pack creates an index template named logs as

{
    "index_patterns": [
        "logs-*-*"
    ],
    "composed_of": [
        "logs-mappings",
        "data-streams-mappings",
        "logs-settings"
    ],
    "priority": 100,
    "version": 1,
    "_meta": {
        "managed": true,
        "description": "default logs template installed by x-pack"
    },
    "data_stream": {
        "hidden": false
    },
    "allow_auto_create": true
}

I'd like to know what x-pack creates this index template for and whether it's possible to disable this template's auto-creation.

2

Avoid index pattern collisions in Index templates:

2 Likes
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.