How to remove old indices and old logs after specific duration?

Elastic Stack Elasticsearch
1

Hi,

In my current setup, logs are being generated at 10 GB/day from different applications. Log cycle is Filebeat-> Logstash->Elasticsearch->Kibana.

After doing research, i found that we can delete the old indices using elasticsearch-curator. I am following this documentation.
https://www.elastic.co/guide/en/elasticsearch/client/curator/current/delete_indices.html.

I can able to to delete the indices which are older than the specified time with the help of this example Action File
https://www.elastic.co/guide/en/elasticsearch/client/curator/current/ex_delete_indices.html.

Here are my questions.

  1. Does deleting the indix deletes the logs indexed also?
  2. Does deleting frees the disk-space consumed by the logs?
2
  1. Yes.
  2. Yes.
3

Thanks @warkolm.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.