Indecies replicas amnagment

[GyciakasGh0st]

Hello are we doing correctly ? What we trying to achieve that avery index has a replica. But new indecies are created without any replicas.

What we done Configuration -> Elasticsraerch -> Index settings -> so-logs-system_x_security -> index template -> composed of
we added logs-system.security

and then

Configuration -> Elasticsraerch -> Index settings -> so-logs-system_x_security -> index template -> settings -> index -> number of replicas we seted to 1

New shards still creating without replicas

Also we tried add new integration :
Configuration -> Elasticsraerch -> managed integrtations

we added BitDefender but it also not appearing

What we do wrong ?

[cm-ops]

What does this command return? sudo salt-call pillar.get elasticsearch:index_settings

Did you add the BitDefender integration in Fleet to a policy?

[cm-ops]

What version are you currently on?

[GyciakasGh0st]

It was something with option with composed of. I was added values like logs-system.security myself. But after i removed them it started working.

[GyciakasGh0st]

Where i can find the logs? to find what is failing ?

[cm-ops]

https://docs.securityonion.net/en/2.4/help.html#help these log files?