Hi Team,
I have a kubernetes cluster environment running with multiple pods. configured EFK in k8 to get the logs. I can able to see the logs in kibana dashboard but the curator is not deleting the indices from elastic search pods. Near the hosts' field, I provided the pod name. curator is deployed in default namespace and EFK was deployed in a different namespace. does it should be in same namespace?
apiVersion: v1
kind: ConfigMap
metadata:
name: curator-config
data:
action_file.yml: |-
---
# Remember, leave a key empty if there is no value. None will be a string,
# not a Python "NoneType"
#
# Also remember that all examples have 'disable_action' set to True. If you
# want to use this action as a template, be sure to set this to False after
# copying it.
actions:
1:
action: delete_indices
description: "Clean up ES by deleting old indices"
options:
timeout_override:
continue_if_exception: False
disable_action: False
filters:
- filtertype: age
source: name
direction: older
timestring: '%Y.%m.%d'
unit: days
unit_count: 1
field:
stats_result:
epoch:
exclude: False
config.yml: |-
---
# Remember, leave a key empty if there is no value. None will be a string,
# not a Python "NoneType"
client:
hosts:
- elasticsearch
port: 9200
url_prefix:
use_ssl: False
certificate:
client_cert:
client_key:
ssl_no_validate: False
http_auth:
timeout: 30
master_only: False
logging:
loglevel: INFO
logfile:
logformat: default
blacklist: ['elasticsearch', 'urllib3']