elastic / elastic/integrations

[Elasticsearch]: Creates concrete "monitoring-indices" index without alias and ILM

Open
#15,054 2 comments 0 reactions 0 assignees View on GitHub
Integration:elasticsearch needs:triage Team:Stack Monitoring
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

Elasticsearch [elasticsearch]

### Dataset Name

monitoring-indices

### Integration Version

1.19.0

### Agent Version

8.18.3+build202507101319

### Agent Output Type

elasticsearch

### Elasticsearch Version

8.18.3

### OS Version and Architecture

Ubuntu

### Software/API Version

logs-elasticsearch.index_pivot-default-0.3.0

### Error Message

_No response_

### Event Original

_No response_

### What did you do?

Installed the integration and ensured `logs-elasticsearch.index_pivot-default-0.3.0` transform ran.

### What did you see?

> Updated transform state to [STARTED].
> Created destination index [monitoring-indices].
> Set up aliases [] for destination index [monitoring-indices].

No alias, no ILM.

```
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "1",
```

Index grew to over 80 GB.

### What did you expect to see?

Expected `monitoring-indices` to be created with an ILM and an alias similar to the other monitoring indices in order to be able to manage it.

### Anything else?

Are we expected to manage this ourselves?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.