ELASTALERT-CREATE-INDEX(1)

💖 NAME 💖

elastalert-create-index — bestie, this is the little tool that sets up your Elasticsearch index for ElastAlert, and I'm gonna walk you through every single flag, no gatekeeping 💅

🌸 DESCRIPTION 🌸

okay so here's the vibe. You run this thing and it makes your index. That's it. That's the whole job. But there are so many knobs to turn, and we're gonna turn all of them together 🫶

The way you call it looks like this:

usage: elastalert-create-index [-h] [--host HOST] [--port PORT]

[--username USERNAME] [--password PASSWORD]
       [--url-prefix URL_PREFIX] [--no-auth] [--ssl] [--no-ssl]
       [--verify-certs] [--no-verify-certs] [--index INDEX] [--alias
       ALIAS] [--old-index OLD_INDEX] [--send_get_body_as
       SEND_GET_BODY_AS] [--boto-profile PROFILE] [--profile PROFILE]
       [--aws-region AWS_REGION] [--timeout TIMEOUT] [--config CONFIG]
       [--recreate RECREATE]

✨ options: ✨

• -h, --help — shows this help message and then dips. iconic behavior honestly 💖
• --host HOST — the Elasticsearch host. where your cluster lives, fr fr 🏠
• --port PORT — the Elasticsearch port. the lil door number 🔑
• --username USERNAME — Elasticsearch username. who you're claiming to be 👑
• --password PASSWORD — Elasticsearch password. the secret. do NOT put this in the group chat 🙈
• --url-prefix URL_PREFIX — Elasticsearch URL prefix. that lil something-something tacked onto the front of the URL 🌈
• --no-auth — suppresses the prompt for basic auth. no asking, just going ✨
• --ssl — use TLS. secure the connection, we love a locked-down queen 🔒
• --no-ssl — do not use TLS. no encryption, raw dogging the wire (respectfully) 💀
• --verify-certs — verify TLS certificates. check those IDs at the door 🎀
• --no-verify-certs — do not verify TLS certificates. skipping the ID check, lowkey risky but okay 🫣
• --index INDEX — the index name to create. name your baby 🍼
• --alias ALIAS — the alias name to create. a cute nickname that points at the real one 🦋
• --old-index OLD_INDEX — the old index name to copy. moving the whole closet over, one hanger at a time 👗
• --send_get_body_as SEND_GET_BODY_AS — the method for querying Elasticsearch — POST, GET or source 🌟
• --boto-profile PROFILE — DEPRECATED, bestie, use --profile instead. it's the Boto profile to use for signing requests. still works, but it's giving old news 📰
• --profile PROFILE — the AWS profile to use for signing requests. optionally you can use the AWS_DEFAULT_PROFILE environment variable instead 💜
• --aws-region AWS_REGION — the AWS Region to use for signing requests. optionally you can use the AWS_DEFAULT_REGION environment variable instead 🌍
• --timeout TIMEOUT — Elasticsearch request timeout. how long we're willing to wait before we're like... okay bestie, we're done here ⏰
• --config CONFIG — the global config file (default: config.yaml). your settings home base 🏡
• --recreate RECREATE — force re-creation of the index. ⚠️ This will cause data loss. Like, actual, permanent, gone-forever data loss. Not a drill, not a vibe, not a cute little oops. Be SO sure before you do this one 😭

heads up bestie: --recreate is the scary one. Everything else is just configuration, but that flag will eat your data and not apologize 💀

and that's the whole page, you're basically a certified elastalert-create-index girlie now, go off 👑

this was elastalert-create-index version 0.2.4-3, from December 2022 — mwah, sending you love and successful index creation 🎀💖