Filter snapshot by filename

Elastic Stack Elasticsearch
1

Hello All,

Suppose that we have snapshot that has this format of filename curator-20180813011640, how can I filter that by day?

This is the current filter that I used but I cannot get the snapshot that I need to delete

- filtertype: age
  source: name
  direction: older
  timestring: '%Y.%m.%d%H%M'
  unit: days
  unit_count: 1
  exclude:

Thank you in Advance

2

If you notice, that’s a pretty specific date. It represents Curator execution time. Snapshots all have an internal metadata timestamp that should be within a second or two of that time that represents snapshot creation time. You can use source: creation_date instead of name in your age filter, and can safely omit the timestring.

3

It worked.

Thanks a lot!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.