Dear all,
May I know is it possible delete logs which older then 90 days instead of indices in curator? Thanks
Best Regards,
Peter Chow
Are you looking to selectively delete data from within an index? Are you not using time-based indices?
2 Likes
@peterch What Christian is bringing up is important. A delete_by_query is much, much harder on an elasticsearch cluster than dropping an index in much the same way as 100,000 atomic DELETE from TABLE where age>90days is more taxing to a database than a DROP TABLE.
Curator is designed to delete indices for this reason. If there is any possible way you can change your indexing setup to use time-series indices, it will only help you in the long run, whether you use Curator or something else.
1 Like
Short answer: No. Curator only acts on indices, no matter the action.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.