From b4d1b06dbef3c95945f0ae2baafb9b740bbdf81a Mon Sep 17 00:00:00 2001
From: Dennis Oelkers <dennis@graylog.com>
Date: Mon, 11 Sep 2023 12:37:47 +0200
Subject: [PATCH] Disabling auto-creation for data node. (#16413)

---
 .../org/graylog/datanode/process/OpensearchConfiguration.java | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/data-node/src/main/java/org/graylog/datanode/process/OpensearchConfiguration.java b/data-node/src/main/java/org/graylog/datanode/process/OpensearchConfiguration.java
index 00815fa02f..d99dbe2df3 100644
--- a/data-node/src/main/java/org/graylog/datanode/process/OpensearchConfiguration.java
+++ b/data-node/src/main/java/org/graylog/datanode/process/OpensearchConfiguration.java
@@ -44,9 +44,11 @@ public record OpensearchConfiguration(
 
         Map<String, String> config = new LinkedHashMap<>();
 
+        config.put("action.auto_create_index", "false");
+
         // currently, startup fails on macOS without disabling this filter.
         // for a description of the filter (although it's for ES), see https://www.elastic.co/guide/en/elasticsearch/reference/7.17/_system_call_filter_check.html
-        if(OS.isFamilyMac()) {
+        if (OS.isFamilyMac()) {
             config.put("bootstrap.system_call_filter", "false");
         }