# Elasticsearch Curator error **URL:** \ **Category:** Elasticsearch\ **Tags:** curator\ **Created:** [February 18, 2020, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767 "2020-02-18T11:14:56Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![rj23495](https://avatars.discourse-cdn.com/v4/letter/r/7ba0ec/32.png) [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Post date:** [February 18, 2020, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/1 "2020-02-18T11:14:57Z")
Hi all, I am using ELK curator to delete old elasticsearch indices periodically. I am running this as kubernetes cronjob to delete older indices. I am facing the following error- `2020-02-18 15:54:51,628 ERROR curator.cli run:213 Failed to complete action: delete_indices. : 'indices'` Following are my configurations - ``` actions: 1: action: delete_indices description: >- Delete indices older than 2 weeks (based on index name), for vae prefixed indices. Ignore the error if the filter does not result in an actionable list of indices (ignore_empty_list) and exit cleanly. options: ignore_empty_list: True timeout_override: continue_if_exception: False disable_action: filters: - filtertype: pattern kind: regex value: '^prod-geo-localhostaccesslog' exclude: - filtertype: age source: creation_date direction: older timestring: '%Y.%W' unit: weeks unit_count: 1 config.yml: |- client: hosts: - https://es.test.com port: url_prefix: use_ssl: False certificate: client_cert: client_key: aws_key: aws_secret_key: aws_region: ssl_no_validate: False http_auth: timeout: 30 master_only: False logging: loglevel: INFO logfile: logformat: default blacklist: ['elasticsearch', 'urllib3'] ``` ---
**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Post date:** [February 18, 2020, 12:56pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/2 "2020-02-18T12:56:28Z")
Hi Rajat, Are you indices created on weekly basis or daily basis ? In description you say delete indices older than 2 weeks, but count is 1 (considering unit weeks, it will delete indices older than a week), may be you need to relook here. Also, try with this config: ``` filters: - exclude: ~ filtertype: pattern kind: prefix value: prod-geo-localhostaccesslog - direction: older exclude: ~ filtertype: age source: creation_date timestring: "%Y.%W" unit: weeks unit_count: 1 options: continue_if_exception: false disable_action: false ignore_empty_list: true timeout_override: ~ ``` ---
**Author:** ![rj23495](https://avatars.discourse-cdn.com/v4/letter/r/7ba0ec/32.png) [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Post date:** [February 18, 2020, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/3 "2020-02-18T12:57:52Z")
@Ayush_Mathur sorry, forgot to change the description. Thanks for the config i ll try this out. ---
**Author:** ![rj23495](https://avatars.discourse-cdn.com/v4/letter/r/7ba0ec/32.png) [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Post date:** [February 18, 2020, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/4 "2020-02-18T13:03:24Z")
@Ayush_Mathur is the syntax correct? the hyphens and all, although i tried with the following but same error. ``` options: ignore_empty_list: True timeout_override: ~ continue_if_exception: False disable_action: false filters: - filtertype: pattern kind: prefix value: prod-geo-localhostaccesslog exclude: - filtertype: age source: creation_date direction: older timestring: '%Y.%W' unit: weeks unit_count: 1 ``` ---
**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Post date:** [February 18, 2020, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/5 "2020-02-18T13:23:14Z")
@rj23495 agree the indentation is bit off, but assumed you would fix it. Anyway, are your indices name starting with prod-geo-localhostaccesslog ? If yes, this config should work (using the same approach in my project). ---
**Author:** ![rj23495](https://avatars.discourse-cdn.com/v4/letter/r/7ba0ec/32.png) [@rj23495](https://discuss.elastic.co/u/rj23495)\ **Post date:** [February 18, 2020, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/6 "2020-02-18T13:41:27Z")
yes, my index starts with prod-geo-localhostaccesslog-2020.02 etc something like this. I tried with the configs u sent but still same error. Also ES version is 6.2.3 curator version - 5.8.1 ---
**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\ **Post date:** [February 18, 2020, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/7 "2020-02-18T16:13:46Z")
OK, can you check if you are able to curl your ES host ([https://es.test.com](https://es.test.com)) from inside your curator container ? My guess is you're missing either authentication params or certificates/ ssl\_no\_validate should be True/ host should be changed to logging-es with port 9200 (or whatever cluster name you're using). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 17, 2020, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-curator-error/219767/8 "2020-03-17T16:13:50Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.