Delete old indices automatically?

Elastic Stack Elasticsearch
1

Hi,

So I have created an ELK stack for passing IIS logs and it is generating around 3GB a day and it is storing in an index a day. Eg: filebeat-2017.06.21

I want to delete old index so that ElasticSearch doesn't crash. How should I do?
Do I have to do this manually or is there a way?

I saw something called "Curator"? Should use that?

2

Yes. Read the documentation for more information.

3

Hey thanks. I used their python library, wrote a script and added a job on crontab.
Thanks anyway.

1 Like
4

Hey,

It is working fine, but after deleting the old indices, it regenerates after a minute or two. What should i do?

5

That can only happen if data is still being written to those indices. I'd investigate that.

2 Likes
6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.