I created policy to delete index older than 7days
delete_7days_security-auditlog
in gui under below apply policy applied and they work i.e delete indices older than 7days
[Index Management]
how do I attach all new daily indices this policy
there is no pattern * to attach policy for indices
but can define pattern* for creating inside policy to match index in ISM Templates
it looks like last applied policy is auto attach to new daily indices
was going to check as below ism_template but its already attaching dont know how ?
“ism_template”: {
“index_patterns”: [“security*”],
“priority”: 100
nervermind
when i was trying to copy same index policy to another instance I did see json definition has ism_template pattern defined and thats probably adding to new indices daily
