config-monitoring-data-streams-elastic-agent.md

mapped_pages	applies_to
https://www.elastic.co/guide/en/elasticsearch/reference/current/config-monitoring-data-streams-elastic-agent.html	deployment self all

Configuring data streams created by Elastic Agent [config-monitoring-data-streams-elastic-agent]

When monitoring using {{agent}}, data is stored in a set of data streams with the following pattern:

metrics-{{product}}.stack_monitoring.{{dataset}}-{namespace}

For example:

metrics-elasticsearch.stack_monitoring.shard-default

The settings and mappings for these data streams are determined by an index template with the following pattern:

metrics-{{product}}.stack_monitoring.{{dataset}}

For example:

metrics-elasticsearch.stack_monitoring.shard

To change the settings of each data stream, edit the metrics-{{product}}.stack_monitoring.{{dataset}}@custom component template that already exists. You can do this in {{kib}}:

• Navigate to Stack Management > Index Management > Component Templates.
• Search for the component template.
• Select the Edit action.

You can also use the {{es}} API:

• Retrieve the component template using the get component template API.
• Edit the component template.
• Store the updated component template using the update component template API.

After changing the component template, the updated settings are only applied to the data stream’s new backing indices. Roll over the data stream to immediately apply the updated settings to the data stream’s write index.