elasticsearch config_error ai_generated true

ElasticsearchException: Rollup job [my_rollup] cannot be started because the index pattern [logs-*] does not match any existing indexes

ID: elasticsearch/rollup-job-no-matching-indexes

Also available as: JSON · Markdown · 中文
85%Fix Rate
88%Confidence
1Evidence
2024-08-12First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
7.10.0 active — — —
7.17.0 active — — —
8.0.0 active — — —

Root Cause

The rollup job's index pattern does not match any current indices, either because the indices have not been created yet or the pattern is incorrect.

generic

中文

Rollup 作业的索引模式未匹配到任何当前索引，可能是因为索引尚未创建或模式不正确。

Official Documentation

https://www.elastic.co/guide/en/elasticsearch/reference/7.17/rollup-getting-started.html

Workarounds

  1. 90% success Update the rollup job's index pattern to match existing indices: `PUT _rollup/job/my_rollup/_update { "pattern": "logs-2025*" }` then start the job. 
    Update the rollup job's index pattern to match existing indices: `PUT _rollup/job/my_rollup/_update { "pattern": "logs-2025*" }` then start the job.
  2. 70% success Create a dummy index matching the pattern to allow job start: `PUT logs-dummy` (then delete it after job starts if needed, but ensure real data exists). 
    Create a dummy index matching the pattern to allow job start: `PUT logs-dummy` (then delete it after job starts if needed, but ensure real data exists).

中文步骤

  1. Update the rollup job's index pattern to match existing indices: `PUT _rollup/job/my_rollup/_update { "pattern": "logs-2025*" }` then start the job.
  2. Create a dummy index matching the pattern to allow job start: `PUT logs-dummy` (then delete it after job starts if needed, but ensure real data exists).

Dead Ends

Common approaches that don't work:

  1. 95% fail

    The rollup job pattern remains unchanged; it will still not match the new indices.

  2. 98% fail

    The job will fail immediately because there are no indices to roll up.