I am looking to create an alias of an index that would retrieve information according to one of 2 filters. One or the other, an "OR" in fact. For example: PUT .internal.alerts-security.alerts-jse-000001/_alias/.alerts-security.alerts-global-overview { "filter": { "terms": { "data_stream.namespace": [ "etu" ] } } } or PUT .internal.alerts-security.alerts-jse-000001/_alias/.alerts-security.alerts-global-overview { "filter": { "terms": { "agent.name": [ "ec6b600226d0",… Read More How to create a filter on 2 fields in an alias?

I am trying to create an alias with a filter of an index pattern metrics-* . I was able to do it yesterday and the day before without any problems but I can’t do it again today, even if I re-run the same queries as yesterday. I have no problem creating an alias of logs-*… Read More illegal_argument_exception when creating an index alias – Elastic Cloud