Managing Old indices

Elastic Stack Elasticsearch
1

Hey, I am fairly new to elasticsearch, and was wondering what the best practices are for automatically removing indices older than xx days and if it is possible to also automatically compress closed indices.

2

Curator tool will help a lot.

3

Yeah, I actually tried that with some of the older versions of elasticsearch. And I have it working for closing indices.
I can't seem to get the action-delete.yml to work though.
My file looks like this.

actions:
 1:
    action: delete_indices
      description: >-
      Delete indices older than 7 days (based on index name), for logstash-
      prefixed indices.
    options:
      ignore_empty_list: True
      delete_aliases: False
      timeout_override:
      continue_if_exception: False
      disable_action: False
    filters:
    - filtertype: pattern
      kind: prefix
      value: logstash-xxx-
      exclude:
    - filtertype: age
      source: name
      direction: older
      timestring: '%Y.%m.%d'
      unit: days
      unit_count: 7
      exclude:

and it just gives me this error
curator.exceptions.ConfigurationError: Configuration: options: Location: Action ID "1", action "delete_indices": Bad Value: "False", extra keys not allowed @ data['delete_aliases']. Check configuration file.

4

Please format your code using </> icon as explained in this guide. It will make your post more readable.

Or use markdown style like:

```
CODE
```

I'm sure @theuntergeek can help. :slight_smile:

5

You have delete_aliases in your options section. That option only works in a close action.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.