# Which indexname(s) to exclude for action.auto\_create\_index

**URL:** <https://community.graylog.org/t/which-indexname-s-to-exclude-for-action-auto-create-index/10600>\
**Category:** Graylog Central (peer support)\
**Created:** [May 28, 2019, 8:12pm UTC](https://community.graylog.org/t/which-indexname-s-to-exclude-for-action-auto-create-index/10600 "2019-05-28T20:12:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![accts](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/32.png) [@accts](https://community.graylog.org/u/accts)\
**Post date:** [May 28, 2019, 8:12pm UTC](https://community.graylog.org/t/which-indexname-s-to-exclude-for-action-auto-create-index/10600/1 "2019-05-28T20:12:52Z")

</div>

Hi,

I am using my Elasticsearch cluster/node also for other apps than Graylog.  
For that I need action.auto\_create\_index set to true so they continue to work.  
As this is going to make problems with Graylog apparently the question for me is which indexnames have to be excluded there.

Is it enough to set it to  
action.auto\_create\_index: -graylog\*  
or are there any other names involved in internal Graylog handling?

Thanks

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [May 29, 2019, 7:45am UTC](https://community.graylog.org/t/which-indexname-s-to-exclude-for-action-auto-create-index/10600/2 "2019-05-29T07:45:32Z")

</div>

as you can configure the prefix yourself that can’t be answered by anyone than yourself.

For default that would be:

```auto
action.auto_create_index: graylog-*

```

---

<div class="post-metadata">

**Author:** ![accts](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/32.png) [@accts](https://community.graylog.org/u/accts)\
**Post date:** [May 29, 2019, 8:09am UTC](https://community.graylog.org/t/which-indexname-s-to-exclude-for-action-auto-create-index/10600/3 "2019-05-29T08:09:02Z")

</div>

Yes I was talking of default/vanilla install.

It would be -graylog-\* then because we don’t want it to be auto created, but that answered my question, thank you

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 12, 2019, 8:09am UTC](https://community.graylog.org/t/which-indexname-s-to-exclude-for-action-auto-create-index/10600/4 "2019-06-12T08:09:08Z")

</div>

Closed on June 12, 2019, 8:09am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.