Created
January 16, 2018 11:42
-
-
Save turric4n/73229e3622fae0be480b8a792d7f6cab to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #ve a key empty if there is no value. None will be a string, | |
| # not a Python "NoneType" | |
| # | |
| # Also remember that all examples have 'disable_action' set to True. If you | |
| # want to use this action as a template, be sure to set this to False after | |
| # copying it. | |
| actions: | |
| 1: | |
| action: delete_indices | |
| description: >- | |
| Delete indices older than 30 days (based on index name), for logstash- | |
| prefixed indices. Ignore the error if the filter does not result in an | |
| actionable list of indices (ignore_empty_list) and exit cleanly. | |
| options: | |
| ignore_empty_list: True | |
| timeout_override: | |
| continue_if_exception: False | |
| disable_action: false | |
| filters: | |
| - filtertype: pattern | |
| kind: prefix | |
| value: logstash- | |
| exclude: | |
| - filtertype: age | |
| source: field_stats | |
| field: '@timestamp' | |
| stats_result: min_value | |
| direction: older | |
| unit: days | |
| unit_count: 30 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment