It is probably me but there is no new ecs-suricata- created today
I do not see how i coud block this from happening
configuration was validated for logstash, elastic, suricata and all were restarted
manually creating the index does not resolve anything, there are however many entries in rocknsm_server.log where typically there is just one for an index
the newly created ecs-suricata-network-2021.02.23 is now at 208b size