Hi,
i tried to do the same but receiving following error message:
[elasticsearch@testelstd01 ~] ./opt/elasticsearch-curator/curator --dry-run .curator/delete-logstash-older-90-days.yml 2019-02-20 09:13:43,748 ERROR Schema error: extra keys not allowed @ data['disk-space'] 2019-02-20 09:13:43,749 ERROR Schema error: Configuration: filter: Location: Action ID "2", action "delete_indices", filter #1: {'filtertype': 'space', 'disk-space': 80, 'use_age': True, 'source': 'creation_date'}: Bad Value: "80", extra keys not allowed @ data['disk-space']. Check configuration file. [elasticsearch@testelstd01 ~]
My action file:
actions:
1:
action: delete_indices
description: >-
Delete indices older than 120 days
options:
ignore_empty_list: true
filters:
- filtertype: pattern
kind: prefix
value: logstash- - filtertype: age
source: name
direction: older
timestring: '%Y.%m.%d'
unit: days
unit_count: 120
2:
action: delete_indices
description: >-
Delete indices in excess of 80 gigabytes
options:
ignore_empty_list: true
filters: - filtertype: pattern
kind: prefix
value: logstash- - filtertype: space
disk-space: 80
use_age: true
source: creation_date
curator.yml file:
client:
hosts:
- testelstd01
- testelstd02
- testelstd03
port: 9200
url_prefix:
use_ssl: True
certificate: config/certs/ca.crt
http_auth: '<User_name>:'
timeout: 120
master_only: False
logging:
loglevel: INFO
logfile:
logformat: default
blacklist: ['elasticsearch', 'urllib3']
logstash.conf file:
output{
stdout{codec => rubydebug}
elasticsearch{
hosts => ["19.88.56.93","19.889.934.02"]
hosts => ["${ELASTICSEARCH1}","${ELASTICSEARCH2}","${ELASTICSEARCH3}"]
index => "logstash-ti-%{+YYYY.MM.dd}"
sniffing => true
}
}
Can you please explain me a bit more?
Thanks.