Skip to content

Commit 764afa9

Browse files
authored
Index target no date math for data stream nor alias
👋 Regarding elastic/docs-content#2761 & #1252, Attempts to reduce doc pain point surface area to explicitly note to users to stop using date math with aliases or data streams. Aliases will not ILM rollover bootstrap & data streams will bootstrap but incur multiple data streams which then fail to progress through ILM rollover as expected. Thanks for contributing to Logstash! If you haven't already signed our CLA, here's a handy link: https://www.elastic.co/contributor-agreement/
1 parent c0c7b1b commit 764afa9

1 file changed

Lines changed: 6 additions & 1 deletion

File tree

docs/index.asciidoc

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -842,10 +842,15 @@ NOTE: `ilm_rollover_alias` does NOT support dynamic variable substitution as
842842
The indexing target to write events to.
843843
Can point to an {ref}/index-mgmt.html[index], {ref}/aliases.html[alias], or {ref}/data-streams.html[data stream].
844844
This can be dynamic using the `%{foo}` syntax.
845+
846+
Dynamic syntax might make sense with data streams and aliases, but results should be
847+
validated against cluster index templates and Index lifecycle management (ILM) setup.
848+
Placeholder date math should not normally be used with aliases nor data streams.
849+
845850
The default value will partition your indices by day so you can more easily
846851
delete old data or only search specific date ranges.
847852
Indexes may not contain uppercase characters.
848-
For weekly indexes ISO 8601 format is recommended, eg. logstash-%{+xxxx.ww}.
853+
For weekly indexes ISO 8601 format is recommended, eg. `logstash-%{+xxxx.ww}`.
849854
Logstash uses
850855
http://www.joda.org/joda-time/apidocs/org/joda/time/format/DateTimeFormat.html[Joda
851856
formats] and the `@timestamp` field of each event is being used as source for the date.

0 commit comments

Comments
 (0)