Index lifecycle management, deleting by "name age"

Elastic Stack Elasticsearch
1

I am using ELK for log analysis. I use this type of index names
myindex-%{+xxxx.ww}
i.e. weekly indices.
I would like to use the index lifecycle management to delete indices that CONTAINS data older than 90 days. Note that I want to remove indices based on how old the data is, not necessary when the index was created.
If I start a new log ingestion pipeline, I may suck in data from weeks and months back and multiple indices for different weeks will be created at once.
The current (6.6) version only supports age based on index creation, but I would like to base the deletion on the age indicated by the index name. Something similar to what can be done in curator.
https://www.elastic.co/guide/en/elasticsearch/client/curator/5.6/filtertype_age.html#_literal_name_literal_based_ages

Are there any plans to support this?

2

Not that I am aware. This will continue to be one of the use cases where Curator is the correct choice.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.