Curator not working correctly

Elastic Stack Elasticsearch
1

Hello experts,
For some reason, curator running on my ES single node cluster is not working correctly . Curator version is 5.4.1 Also, to add additional info, I strongly feel that issue is with delete_indices.yml file because only the first conditional filter in my delete_indices.yml works, rest other filters are simply ignored.
actions:
1:
action: delete_indices
description: >-
Delete indices older than 30 days (based on index name), for ind_ecs_*
prefixed indices. Ignore the error if the filter does not result in an
actionable list of indices (ignore_empty_list) and exit cleanly.
options:
ignore_empty_list: True
filters:
- filtertype: pattern
kind: prefix
value: '^(ind_ecs_occ_msg_counter-|ind_ecs_occ_msg_log-|ind_ecs_occ_dm_counter-|ind_ecs_occ_dm_log-|ind_ecs_airs_counter-|ind_ecs_airs_log-|ind_ecs_ccn_counter-|ind_ecs_ccn_log-|ind_ecs_sdp_counter-|ind_ecs_sdp_log-).*$'
- filtertype: age
source: name
direction: older
timestring: '%Y.%m.%d'
unit: days
unit_count: 5
Could this be a syntax issue somewhere in my delete_indices.yml? Attached is config.yml, delete_indices.yml and curator log. Please let me know for more info. Thanks for your assistance!!

2

Delete_indices.yml

actions:
1:
action: delete_indices
description: >-
Delete indices older than 30 days (based on index name), for ind_ecs_*
prefixed indices. Ignore the error if the filter does not result in an
actionable list of indices (ignore_empty_list) and exit cleanly.
options:
ignore_empty_list: True
filters:
- filtertype: pattern
kind: prefix
value: '^(ind_ecs_occ_msg_counter-|ind_ecs_occ_msg_log-|ind_ecs_occ_dm_counter-|ind_ecs_occ_dm_log-|ind_ecs_airs_counter-|ind_ecs_airs_log-|ind_ecs_ccn_counter-|ind_ecs_ccn_log-|ind_ecs_sdp_counter-|ind_ecs_sdp_log-).' - filtertype: age source: name direction: older timestring: '%Y.%m.%d' unit: days unit_count: 5 2: action: delete_indices description: >- Delete indices older than 7 days (based on index name), for eccgw_systemstat prefixed indices. Ignore the error if the filter does not result in an actionable list of indices (ignore_empty_list) and exit cleanly. options: ignore_empty_list: True filters: - filtertype: pattern kind: prefix value: '^(eccgw_systemstat-).*'
- filtertype: age
source: name
direction: older
timestring: '%Y.%m.%d'
unit: days
unit_count: 7
3:
action: delete_indices
description: >-
Delete indices older than 30 days (based on index name), for eccgw_stat
prefixed indices. Ignore the error if the filter does not result in an
actionable list of indices (ignore_empty_list) and exit cleanly.
options:
ignore_empty_list: True
filters:
- filtertype: pattern
kind: prefix
value: '^(eccgw_stat-).$'
- filtertype: age
source: name
direction: older
timestring: '%Y.%m.%d'
unit: days
unit_count: 10

Config.yml

client:
hosts:
- 127.0.0.1
port: 9200
url_prefix:
use_ssl: False
certificate:
client_cert:
client_key:
ssl_no_validate: False
#http_auth: ericadmin:q.3#edsM!
timeout: 30
master_only: False

logging:
loglevel: DEBUG
logfile: '/var/log/curator/curator.log'
logformat: default

3

Please properly paste your config files between triple back ticks, like this:

```
PASTE HERE
```

Without this, it's impossible to tell how your YAML is formatted, to look for indentation errors.