How to remove old indices and old logs after specific duration?


In my current setup, logs are being generated at 10 GB/day from different applications. Log cycle is Filebeat-> Logstash->Elasticsearch->Kibana.

After doing research, i found that we can delete the old indices using elasticsearch-curator. I am following this documentation.

I can able to to delete the indices which are older than the specified time with the help of this example Action File

Here are my questions.

  1. Does deleting the indix deletes the logs indexed also?
  2. Does deleting frees the disk-space consumed by the logs?
  1. Yes.
  2. Yes.

Thanks @warkolm.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.