Snapshot newly created indices

Elastic Stack Elasticsearch
1

Hello Community,

I have quick question on Curator snapshot. I configured curator and working fine. Now I want to take snapshot on daily basis but delete snapshots on server for every 90days.

so here is my current action file.

actions:
1:
    action: snapshot
    description: >-
        create snapsht for listed indexes in s3-backup repository
    options:
      repository: test
      name: elk-%Y%m%d%H%M
      continue_if_exception: False
      ignore_unavailable: False
      wait_for_completion: False
      wait_interval: 10
    filters:
    - filtertype: pattern
      kind: regex
      value: '^(.s|.l|.m|.w|.k|.t|m).*$'
      exclude: True
    - filtertype: age
      source: creation_date
      direction: older
      unit: days
      unit_count: 1
2:
    action: delete_indices
    description: >-
        delete indexes  listed indexes in s3-corp  repository
    options:
      continue_if_exception: False
      ignore_empty_list: True
    filters:
    - filtertype: pattern
      kind: regex
      value: '^(.s|.l|.m|.w|.k|.t).*$'
      exclude: True
    - filtertype: age
      source: creation_date
      direction: older
      unit: days
      unit_count: 90

but in this process already snapshotted indices adding in to new snapshot that creates each day. so I want know how to configure to take only snapshot of the indices which are not snapshotted earlier.

Also,
I want to take only previous day snapshots on daily basis.

Thanks,

2

Just add an additional age filter under your older one:

    - filtertype: age
      source: creation_date
      direction: older
      unit: days
      unit_count: 1
    - filtertype: age
      source: creation_date
      direction: younger
      unit: days
      unit_count: 2

Depending on when you run it, you might need to set younger to 3 days.

3

That worked. Thanks

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.