Is there a way in Curator I can add an alias to all indices in the current month? So, if say today is 1st Feb (which is it) how would I set up an
alias action to add an alias of "current_month" to anything from the first day of the current month?
add: filters: - filtertype: pattern kind: prefix value: event- exclude: - filtertype: age source: name direction: younger timestring: '%Y.%m.%d' unit: months unit_count: 0 exclude:
unit_count: 1 but that basically takes everything from a month ago. Is there a way to say "take everything from the 1st of this month to now"?