Delete indices curator 4.2

Elastic Stack Elasticsearch
1
  1. I install curator 4.2 on ELK server (kibana 4.6, elasticsearch 2.4, logstash 2.4) When run command
    curator_cli delete_snapshots --repository my_backup --filter_list '[{"filtertype":"age","source":"name","direction":"older", "timestring": "'%Y.%m.%d'", "unit":"days","unit_count":1},{"filtertype":"pattern","kind":"prefix","value":"snapshot-"}]' delete only snapshots but date in folder indices not delete.

1 ) how to remove data indices together with snapshots?
2 I want delete indices date in month older 3.
curator_cli delete_indices --filter_list '[{"filtertype":"age","source":"name","direction":"older", "timestring": "'%Y.%m.%d'", "unit":"days","unit_count":90},{"filtertype":"pattern","kind":"prefix","value":"logstash-"}]'
But I will delete date older 90 day but not delete the three months.
How delete indices in month?

2

Can you please explain a bit further? When you ask how to delete indices in months, are the indices named with a month-style pattern, e.g. indexname-2016.10, indexname-2016.09, or something like that? Or are you trying to do something else?

3

I applied (filtertype":"age","source":"name","direction":"older", "timestring": "'%Y.%m.%d'", "unit":"months","unit_count":3)
When you use month based trimming, curator starts counting at the first day of the current month, not the current day of the current month. For example, if today is April 15, and you want to delete indices that are 2 months older than today (delete: months: 2), curator doesn't delete indices that are dated older than February 15, it deletes indices older than February 1. That is, it goes back to the first day of the current month, then goes back two whole months from that date.

how to remove backup data indices logstash- together with snapshots?

4

Can you provide evidence to support this? That statement is true for Curator 3, but Curator 4 just measures unit * unit_count * the number of seconds in unit, and counts back that many seconds from the current timestamp. It does not count whole months, or track the first day of the month, or anything like that.

5

I have no evidence to support this. Now I do not have indicies minimum 1,5 month that testing

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.