ES删除3天前的索引
indices=$(curl -uxxxx:xxxx -s "localhost:9200/_cat/indices?v"|grep 'logstash-[a-z]*'|awk '{print $3}')
sevenDaysAgo=$(date -d "$(date "+%Y%m%d") -2 days" "+%s")
function delOrNot(){
if [ $(($1-$2)) -ge 0 ] ;then
echo 1
else
echo 0
fi
}
for index in ${indices}
do
indexDate=`echo ${index}|cut -d '-' -f 3|sed 's/\./-/g'`
indexTime=`date -d "${indexDate}" "+%s"`
if [ `delOrNot ${indexTime} ${sevenDaysAgo}` -eq 0 ] ;then
delResult=`curl -uxxxx:xxxx -s -XDELETE "localhost:9200/${index}"`
echo "delete result is ${delResult}"
if [ `echo ${delResult}|grep 'acknowledged'|wc -l` -eq 1 ] ;then
echo "${index} had already been deleted!"
else
echo "there is something wrong happend when deleted ${index}"
fi
fi
done