Curator->Error:Skipping action “delete_indices” due to empty list!

Elastic Stack Elasticsearch
1

Hi,

i tried to do the same but receiving following error message:
[elasticsearch@testelstd01 ~] ./opt/elasticsearch-curator/curator --dry-run .curator/delete-logstash-older-90-days.yml 2019-02-20 09:13:43,748 ERROR Schema error: extra keys not allowed @ data['disk-space'] 2019-02-20 09:13:43,749 ERROR Schema error: Configuration: filter: Location: Action ID "2", action "delete_indices", filter #1: {'filtertype': 'space', 'disk-space': 80, 'use_age': True, 'source': 'creation_date'}: Bad Value: "80", extra keys not allowed @ data['disk-space']. Check configuration file. [elasticsearch@testelstd01 ~]

My action file:

actions:

1:
action: delete_indices
description: >-
Delete indices older than 120 days
options:
ignore_empty_list: true
filters:

  • filtertype: pattern
    kind: prefix
    value: logstash-
  • filtertype: age
    source: name
    direction: older
    timestring: '%Y.%m.%d'
    unit: days
    unit_count: 120
    2:
    action: delete_indices
    description: >-
    Delete indices in excess of 80 gigabytes
    options:
    ignore_empty_list: true
    filters:
  • filtertype: pattern
    kind: prefix
    value: logstash-
  • filtertype: space
    disk-space: 80
    use_age: true
    source: creation_date

curator.yml file:

client:
hosts:

  • testelstd01
  • testelstd02
  • testelstd03
    port: 9200
    url_prefix:
    use_ssl: True
    certificate: config/certs/ca.crt
    http_auth: '<User_name>:'
    timeout: 120
    master_only: False

logging:
loglevel: INFO
logfile:
logformat: default

blacklist: ['elasticsearch', 'urllib3']

logstash.conf file:

output{

stdout{codec => rubydebug}

elasticsearch{

hosts => ["19.88.56.93","19.889.934.02"]

hosts => ["${ELASTICSEARCH1}","${ELASTICSEARCH2}","${ELASTICSEARCH3}"]
index => "logstash-ti-%{+YYYY.MM.dd}"
sniffing => true

}

}

Can you please explain me a bit more?
Thanks.

2

How was Curator installed?

Update: Found it.

This should be disk_space, with an underscore rather than a hyphen.

3

Thanks..

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.