Delete: xpack.security.audit.index

Elastic Stack Elasticsearch
1

Hi,

I am using Elastic Search 5.2.2, Kibana 5.2.2 and X-Pack 5.2.2

I have enabled auditing on my cluster, so this is working fine as I could see ".security_audit_log" index are getting generated.

But would like to understand is there any mechanism to archieve and delete Audit Indexes.

Similar to monitoring mechanism(xpack.monitoring.history.duration)

Thanks,
Amit Sinha.

2

There is nothing built-in to X-Pack for this. You can use curator to automate the removal of indices.

3

Thank You.