Hello,
I was trying to create index using math expression (like ILM).
curl -u filebeat:filebeat -XPUT "localhost:9200/%3Cfilebeat-7.15.2-%7Bnow%2Fd%7D%3E"
Configuration of ROR you can see below:
- name: "Filebeat - 1"
auth_key: filebeat:filebeat
indices: ["filebeat*"]
actions: ["indices:admin/template/*", "indices:admin/create", "indices:admin/get", "indices:admin/aliases/get", "indices:data/read/*","indices:data/write/*"]
- name: "Filebeat - 2"
auth_key: filebeat:filebeat
indices: ["<filebeat-*"]
actions: ["indices:admin/template/*", "indices:admin/create", "indices:admin/get", "indices:admin/aliases/get", "indices:data/read/*","indices:data/write/*"]
Block “Filebeat - 1” does not allow access, but block “Filebeat - 2” does. Is it really necessary to specify <
character? Finally created index is filebeat-7.15.2-000001
and does not begin with “<” . It’s little bit confusing.