Date math in index name?

Plugins Index Management
1

Hello, maybe somebody know, does opendistro support date math index name?
I want to use it, after rollover operation, when es create a new index.

2

Welcome @xtraenough!

Yes it does! Let’s put a couple of documents into two indexes:

PUT dmath-2020.10.27/_doc/one
{
  "title": "test"
}

PUT dmath-2020.10.26/_doc/two
{
  "title": "testtwo"
}

Then we’ll search for it based on ‘now’ in date format (today is 10/27)

# <dmath-{now/d}> url encoded
GET /%3Cdmath-%7Bnow%2Fd%7D%3E/_search
{
  "query": {
      "match_all": {}
  }
}

This will return:

{
  ...
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 1.0,
    "hits" : [
      {
        "_index" : "dmath-2020.10.27",
        "_type" : "_doc",
        "_id" : "one",
        "_score" : 1.0,
        "_source" : {
          "title" : "test"
        }
      }
    ]
  }
}

Showing only the index for today. You can use the other date based expressions as well.

Also, have you looked at Index State Management?

3

@searchymcsearchface sorry for my bad explaining, i want recreate index by policy, and want rule that next index name wiil be <myindex-{now/d{yyyy.MM.dd}|+3:00}}>