Script – Remove Indices from x Days Ago

Elastic Stack Elasticsearch
1

Hello,

We’re looking to develop a rest script that we can run to
remove any indices before x amount of days, this is required for log retention policies.

We run logstash from Ubuntu servers and can handle the bash scripts
but wanting assistance creating some restful queries to perform this.

Indices are created as “[logstash-]YYYY.MM.DD”

Cluster name: elasticsearch

Thanks.

2

You can use Elasticsearch Curator, a python script designed exactly for this :slight_smile:

1 Like
3

Thanks I'll give that a go.

4

Thanks, this worked for me and was able to script it into a
bash file.

Can curator be used to retrieve documents or just indices?

5

Anyone recomend a method for my last question? Thanks.