Curator is not deleting the index?


(Vikas Gopal) #1

Hi Experts,

I have installed curator and I want to delete 1 day old index so with the help of document I have created action.yml file

Action.yml

actions:
  1:
    action: delete_indices
    description: >-
      Delete indices older than 1 days (based on index name), for logstash-
      prefixed indices. Ignore the error if the filter does not result in an
      actionable list of indices (ignore_empty_list) and exit cleanly.
    options:
      ignore_empty_list: True
      disable_action: False
    filters:
    - filtertype: pattern
      kind: prefix
      value: incident-
    - filtertype: age
      source: name
      direction: older
      timestring: '%Y.%m.%d'
      unit: days
      unit_count: 1

Now when I run

curator --dry-run /opt/es/poc/action.yml

I see something on the screen

2017-09-15 08:32:18,335 INFO      Preparing Action ID: 1, "delete_indices"
2017-09-15 08:32:18,344 INFO      Trying Action ID: 1, "delete_indices": Delete indices older than 1 days (based on index name), for logstash- prefixed indices. Ignore the error if the filter does not result in an actionable list of indices (ignore_empty_list) and exit cleanly.
2017-09-15 08:32:18,378 INFO      DRY-RUN MODE.  No changes will be made.
2017-09-15 08:32:18,378 INFO      (CLOSED) indices may be shown that may not be acted on by action "delete_indices".
2017-09-15 08:32:18,378 INFO      Action ID: 1, "delete_indices" completed.
2017-09-15 08:32:18,378 INFO      Job completed.

I thought it musthave deleted the index but when I check the index on the elasticsearch I still see index .
My index name are like

incident-2017.37
incident-2017.09

so it is weekly Index .37 is the latest one . Can someone suggest what I am doing wrong here ?

Regards
VG


(Vikas Gopal) #2

Never Mind I resolved the issue . I changed the timestring , since I have weekly Indices . So this is what I have done
timestring: '%Y.%W'

After this things works

Regards
VG


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.