Hi Experts,
I have installed curator and I want to delete 1 day old index so with the help of document I have created action.yml file
Action.yml
actions: 1: action: delete_indices description: >- Delete indices older than 1 days (based on index name), for logstash- prefixed indices. Ignore the error if the filter does not result in an actionable list of indices (ignore_empty_list) and exit cleanly. options: ignore_empty_list: True disable_action: False filters: - filtertype: pattern kind: prefix value: incident- - filtertype: age source: name direction: older timestring: '%Y.%m.%d' unit: days unit_count: 1
Now when I run
curator --dry-run /opt/es/poc/action.yml
I see something on the screen
2017-09-15 08:32:18,335 INFO Preparing Action ID: 1, "delete_indices"
2017-09-15 08:32:18,344 INFO Trying Action ID: 1, "delete_indices": Delete indices older than 1 days (based on index name), for logstash- prefixed indices. Ignore the error if the filter does not result in an actionable list of indices (ignore_empty_list) and exit cleanly.
2017-09-15 08:32:18,378 INFO DRY-RUN MODE. No changes will be made.
2017-09-15 08:32:18,378 INFO (CLOSED) indices may be shown that may not be acted on by action "delete_indices".
2017-09-15 08:32:18,378 INFO Action ID: 1, "delete_indices" completed.
2017-09-15 08:32:18,378 INFO Job completed.
I thought it musthave deleted the index but when I check the index on the elasticsearch I still see index .
My index name are like
incident-2017.37 incident-2017.09
so it is weekly Index .37 is the latest one . Can someone suggest what I am doing wrong here ?
Regards
VG