# Graylog Elasticsearch Auto Index

**URL:** <https://community.graylog.org/t/graylog-elasticsearch-auto-index/10177>\
**Category:** Graylog Central (peer support)\
**Created:** [April 29, 2019, 1:29pm UTC](https://community.graylog.org/t/graylog-elasticsearch-auto-index/10177 "2019-04-29T13:29:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Magneton](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/magneton/32/1609_2.png) [@Magneton](https://community.graylog.org/u/Magneton)\
**Post date:** [April 29, 2019, 1:29pm UTC](https://community.graylog.org/t/graylog-elasticsearch-auto-index/10177/1 "2019-04-29T13:29:28Z")

</div>

Dear All,

I have a graylog 3.0 box on ubuntu 18.04 with ES 6 and I want to connect Kibana to the Elasticsearch as well as graylog.

If I try to connect Kibana it says that it can do so because the auto\_create index is set to false

What is the effect of removing the settings auto \_index False ij the elasticsearch.yml?

Kind Regards

Jake

---

<div class="post-metadata">

**Author:** ![Magneton](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/magneton/32/1609_2.png) [@Magneton](https://community.graylog.org/u/Magneton)\
**Post date:** [April 29, 2019, 1:36pm UTC](https://community.graylog.org/t/graylog-elasticsearch-auto-index/10177/2 "2019-04-29T13:36:46Z")

</div>

Hi Gentlemen,

I found this post here at [https://discuss.elastic.co/t/elasticsearchs-action-auto-create-index-setting-impact-on-kibana/117701](https://discuss.elastic.co/t/elasticsearchs-action-auto-create-index-setting-impact-on-kibana/117701)

so would setting it to `action.auto_create_index: +.kibana*, -*` work with Graylog?

Jake

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [April 29, 2019, 3:55pm UTC](https://community.graylog.org/t/graylog-elasticsearch-auto-index/10177/3 "2019-04-29T15:55:28Z")

</div>

yes it will work - we just suggest this setting as having it not can create issues that elasticsearch is creating indices before Graylog has applied settings.

You should read what this setting is for and decide how you want to configure it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 13, 2019, 4:02pm UTC](https://community.graylog.org/t/graylog-elasticsearch-auto-index/10177/4 "2019-05-13T16:02:33Z")

</div>

Closed on May 13, 2019, 4:02pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.