elasticsearch 非法参数异常：index.lifecycle.rollover\u别名[metricbeat-6.8.4-alias]未指向索引[metricbeat-6.8.4-2020.02.24]

目前正在寻求有关设置ilm的帮助，我已按如下方式设置了模板、索引别名和策略

PUT metricbeat-6.8.4-alias-000001
{
  "aliases": {
    "metricbeat-6.8.4-alias": {
      "is_write_index": true
    }
  }
}

PUT _template/metricbeat-6.8.4-alias
{
  "index_patterns": ["metricbeat-6.8.4-*"],                 
  "settings": {
    "number_of_shards": 1,
    "number_of_replicas": 1,
    "index.lifecycle.name": "Delete_Index",      
    "index.lifecycle.rollover_alias": "metricbeat-6.8.4-alias"    
  }
}

但还是出现了如下错误

illegal_argument_exception: index.lifecycle.rollover_alias [metricbeat-6.8.4-alias] does not point to index [metricbeat-6.8.4-2020.02.24]

正在寻求有关如何正确设置ilm的帮助？

---

谢谢

使用生命周期策略创建别名需要三个步骤

简言之：

创建定义适当阶段和操作的生命周期策略

创建索引模板以将策略应用于每个新索引

引导索引作为初始写入索引

我认为您是在创建第一个索引之后创建模板的。您应该首先创建ilm，然后创建模板，在模板中指定要用于索引的ilm策略，最后创建第一个索引（引导）

代码中的示例：

var indexName = "index_name";
var indexPattern = $"{indexName}-*";
var aliasName = $"{indexName}-alias";
var policyName = $"{indexName}-policy";
var firstIndexName = $"{indexName}-000001";

PUT _ilm/policy/index_name-policy
{
    "policy": {
        "phases": {
            "hot": {
                "actions": {
                    "rollover": {
                        "max_size": "5gb",
                        "max_docs": 10000,
                        "max_age":"2d"
                    }
                }
            },
            "warm": {
                "min_age": "5d",
                "actions": {
                }
            },
            "delete": {
                "min_age": "10d",
                "actions": {
                    "delete": {}
                }
            }
        }
    }
}

PUT _template/index_name-template
{
    "index_patterns": ["{{.IndexPattern}}"],
    "settings": {
        "index.number_of_shards": "1",
        "index.number_of_replicas": "1",
        "index.lifecycle.name": "{{.PolicyName}}", 
        "index.lifecycle.rollover_alias": "{{.AliasName}}" 
    },
    "mappings": {
         "_source": {
            "enabled": true
         },
         "properties": {
            {{Properties}}
        }
    }
}

PUT index_name-000001
{
   "aliases": {
        "{{.AliasName}}":{
            "is_write_index": true 
        }
    }
}

---

如果您在生命周期中有滚动策略删除它，然后也删除别名这样的部分

之前

  "index_patterns": ["this-is-index-*"],                 
  "settings": {
    "number_of_shards": 3,
    "number_of_replicas": 1,
    "index.lifecycle.name": "delete-index-policy",      
    "index.lifecycle.rollover_alias": "this-is-alias-*.*.*" 

之后

  "index_patterns": ["this-is-index-*"],                 
  "settings": {
    "number_of_shards": 3,
    "number_of_replicas": 1,
    "index.lifecycle.name": "delete-index-policy"  

---

在

放置索引\u name-000001之后，我收到错误
资源\u已\u存在\u异常