# Curator removes kibana aliases even when filter is configured **URL:** \ **Category:** Elasticsearch\ **Created:** [June 24, 2019, 1:09am UTC](https://discuss.elastic.co/t/curator-removes-kibana-aliases-even-when-filter-is-configured/187029 "2019-06-24T01:09:32Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![fragatina](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Post date:** [June 24, 2019, 1:09am UTC](https://discuss.elastic.co/t/curator-removes-kibana-aliases-even-when-filter-is-configured/187029/1 "2019-06-24T01:09:32Z")
I'm using elasticsearch and kibana 7.1.1 and curator 5.7.5. Latest versions of elasticsearch (I think since 6.7 are using an alias .kibana which creates .kibana\_1, .kibana\_2,....) From this page it seems I thought that elasticsearch-curator 5.7 takes care of all the aliases (kibana\_1 ,...) using just the filtertype: kibana): > **[kibana | Curator Reference \[8.0\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/client/curator/current/filtertype_kibana.html)** However, I'm not sure that it does that. I've noticed that the .kibana\_1 gets removed even if filtertype:kibana is configured in curator. See below details: My curator yaml rules files includes always to exclude kibana (which for I mean to ignore all alias of .kibana, .kibana\_1,.....) with this config: > ``` > filters: > - filtertype: kibana > exclude: True > > ``` However, I'm seeing that the .kibana\_1 index is being deleted, see the following logs in elasticsearch: > [2019-06-23T01:49:50,370][INFO][o.e.c.r.a.AllocationService] [helsinki-mgmt] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.kibana\_1][0]] ...]). > [2019-06-23T02:14:18,201][INFO][o.e.c.m.MetaDataMappingService] [helsinki-mgmt] [op-2019.06.22/vsN6FqBjRHGV0-eVvsuCqg] update\_mapping [\_doc] > **[2019-06-23T03:00:01,530][INFO][o.e.s.SnapshotsService] [helsinki-mgmt] snapshot [es\_backup:curator-20190623030001/SYOYPbTLT8SOVk0v6HE11A] started** > **[2019-06-23T03:02:09,876][INFO][o.e.s.SnapshotsService] [helsinki-mgmt] snapshot [es\_backup:curator-20190623030001/SYOYPbTLT8SOVk0v6HE11A] completed with state [SUCCESS]** > [2019-06-23T03:02:11,772][INFO][o.e.c.m.MetaDataDeleteIndexService] [helsinki-mgmt] [op-2019.06.21/qZmmpTebSgWcRwkoSz9SLw] deleting index > ...... > **[2019-06-23T03:02:11,774][INFO][o.e.c.m.MetaDataDeleteIndexService] [helsinki-mgmt] [.kibana\_1/X4iUFJj4R02FUFqKhUYXWA] deleting index** > [2019-06-23T03:02:11,775][INFO][o.e.c.m.MetaDataDeleteIndexService] [helsinki-mgmt] [ins-2019.06.22/R1kJPN0CRSO4nLwz6Cg7uw] deleting index > [2019-06-23T03:02:14,671][INFO][o.e.c.m.MetaDataCreateIndexService] [helsinki-mgmt] [op-2019.06.22] creating index, cause [auto(bulk api)], templates , shards [1]/[1], mappings After this, there's not .kibana index anymore. Not sure yet if this is reproducible always. Has somebody seen the same thing? ---
**Author:** ![fragatina](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Post date:** [June 24, 2019, 5:17am UTC](https://discuss.elastic.co/t/curator-removes-kibana-aliases-even-when-filter-is-configured/187029/2 "2019-06-24T05:17:31Z")
thanks for your work in curator @theuntergeek, I believe this is a bug with curator 5.7 (unless this is by design 🙂 ) From what I see, this happens everytime with elasticsearch 7.x since it always creates .kibana\_[number] indices and the .kibana alias. As a workaround to this issue, use filtertype: alias (instead of kibana) and aliases .kibana with curator. Suggestions? Thanks. ---
**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Post date:** [June 25, 2019, 4:13pm UTC](https://discuss.elastic.co/t/curator-removes-kibana-aliases-even-when-filter-is-configured/187029/3 "2019-06-25T16:13:11Z")
Sorry for the delay. I've been on vacation. The `kibana` filter is indeed out of date and could use some updating. In the meanwhile, it's recommended to use the `alias` filter with the `.kibana` alias, and also use a `pattern` filter to exclude system indices starting with `.` as needed. ---
**Author:** ![fragatina](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Post date:** [June 25, 2019, 11:27pm UTC](https://discuss.elastic.co/t/curator-removes-kibana-aliases-even-when-filter-is-configured/187029/4 "2019-06-25T23:27:02Z")
Thanks @theuntergeek for confirming! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 23, 2019, 11:27pm UTC](https://discuss.elastic.co/t/curator-removes-kibana-aliases-even-when-filter-is-configured/187029/5 "2019-07-23T23:27:08Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.