Thank you for reading this post, don't forget to subscribe!

In the new general ELK logging system, we do not configure aliases in index templates, because we do not need to rotate indexes by size and the index format <index-name>-00000x is not convenient for us, since the date of creation of the index is not entirely obvious.
The absence of an alias index imposes small restrictions - we cannot manually start a rollover, thereby opening a new index for writing. This could be useful if the current active index is broken, or some fields have the wrong data type, causing important logs to not be written.

If for some reason the index needs to be rolled over, you can run the following from the Dev tools:

Add index alias to index:

Run rollover for alias:

Remove alias from index: