Hello, i want to delete some rows older that 10 days from my index with Elastic Curator with the following action
actions:
1:
action: delete_indices
description: >-
Delete indices older than 10 days based on apps-logs indices
options:
ignore_empty_list: True
disable_action: True
filters:
- filtertype: pattern
kind: prefix
value: apps-logs
- filtertype: age
source: creation_date
unit: days
unit_count: 10
direction: older
result : it delete the index
I want to know if it is possible to delete just certain rows from the index
Yes. You will need to use Kibana Console, or curl, or some other means of making an API call to issue a delete_by_query.
As a relevant aside, if your data is time-series (like logs, or other timestamp + data documents), then delete_by_query is not likely the best approach. Using individual indices that contain intervals of time-series documents is a better approach. Curator can handle these situations.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.