Curator configuration appears to delete too early

Issue: Current configuration of “ unit_count” in action.yml file is 180 days but when this file is invoked the logs are not getting deleted as per configured values. As per current configuration(unit_count=180 days) , all the logs files before 180 should get deleted but in actual the logs files before 180 days are also getting deleted. Below is how action.yml file looks like

action: delete_indices
description: >-
Delete indices older than 180 days (based on index name), for logstash-
prefixed indices. Ignore the error if the filter does not result in an
actionable list of indices (ignore_empty_list) and exit cleanly.
ignore_empty_list: True
continue_if_exception: False
disable_action: False
- filtertype: pattern
kind: prefix
value: logstash-
- filtertype: age
source: name
direction: older
timestring: '%Y.%m.%d'
unit: days
unit_count: 180

But data is being deleted that is younger than that.

Can somone suggest is that the right configuration

Can you share the logs that show what's happening? It would be best if it was DEBUG level logs, as those actually show the time and date comparisons and why they were selected for deletion.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.