Hi,
Sometimes, one would like (the great) Bosun to query the same Elasticsearch (ES) index for an alert.
Current implementation force the user to use 'prefix-yyyy.MM.dd' index naming convention.

Suggested is to allow the user to configure an indexRoot that will be used as the index name, without Bosun need to suffix it with something or any other changes.

Example use-case is ES indices with a small size of a couple of MB per day. ES indices are an expansive unit in matter of RAM and CPU to maintain it.

Currently I solved this by creating a single index 'my_index-global' and funneling all the relevant logs into it. the I crontab-ed an alias creation command to add aliases matching Bosun requirements.

Thanks,
Yarden