Curator system indices

Elastic Stack Elasticsearch
1

Hello,

I use the curator for Elasticsearch and it runs properly for my indices.

I want add to this curator the possibility to delete system indices but I don't know how to make that.

Do you have some ideas ?

2

Curator treats all system indices (with the possible exception of .security) as regular indices. You just have to include indices with prefix .whatever, e.g. .monitoring-

3

Ok thanks.
And it's posible to presice 2 different pattern value in the same action.yml or it must create an action.yml for each value ?

Actually I have this one :

actions:
    1:
    action: delete_indices
    description: >-
        delete indices older than a week.
    options:
        ignore_empty_list: True
        disable_action: True
    filters:
    - filtertype: pattern
      kind: prefix
      value: filebeat-
    - filtertype: age
      source: name
      direction: older
      timestring: '%Y.%m.%d'
      unit: days
      unit_count: 7
4

You can chain actions in sequence, as it says in the docs.

5

Thank you a lot.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.