Date math patterns in index name?

Are the “date math” patterns in index name supported (https://www.elastic.co/guide/en/elasticsearch/reference/7.0/date-math-index-names.html)? For example logstash tries to create index “<logstash-{now/d}-0000>”, and always gets “MISSING_PRIVILEGES”, despite trying allowing various permissions, such as granting role

  • cluster permission “indices:admin/create” or
  • indexpattern “%3Clogstash-*” create_index permissions.