Managing Old indices

(Morten Voss) #1

Hey, I am fairly new to elasticsearch, and was wondering what the best practices are for automatically removing indices older than xx days and if it is possible to also automatically compress closed indices.

Managing indices post Rollover
(David Pilato) #2

Curator tool will help a lot.

(Morten Voss) #3

Yeah, I actually tried that with some of the older versions of elasticsearch. And I have it working for closing indices.
I can't seem to get the action-delete.yml to work though.
My file looks like this.

    action: delete_indices
      description: >-
      Delete indices older than 7 days (based on index name), for logstash-
      prefixed indices.
      ignore_empty_list: True
      delete_aliases: False
      continue_if_exception: False
      disable_action: False
    - filtertype: pattern
      kind: prefix
      value: logstash-xxx-
    - filtertype: age
      source: name
      direction: older
      timestring: '%Y.%m.%d'
      unit: days
      unit_count: 7

and it just gives me this error
curator.exceptions.ConfigurationError: Configuration: options: Location: Action ID "1", action "delete_indices": Bad Value: "False", extra keys not allowed @ data['delete_aliases']. Check configuration file.

(David Pilato) #4

Please format your code using </> icon as explained in this guide. It will make your post more readable.

Or use markdown style like:


I'm sure @theuntergeek can help. :slight_smile:

(Aaron Mildenstein) #5

You have delete_aliases in your options section. That option only works in a close action.

(system) closed #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.