es查看索引及清理索引命令

获取cat命令列表：

curl -XGET127.0.0.1:9200/_cat/

带用户名密码查看索引信息

curl -XGET -u username:password  'http://192.168.90.161:9200/_cat/'

查看索引信息及空间占用：

curl -XGET 127.0.0.1:9200/_cat/indices?v

清理指定索引空间

curl -X POST "127.0.0.1:9200/索引名/_delete_by_query" -H 'Content-Type: application/json' -d'
 {
 "query": {
 "match_all": {
 }
 }
 }
 '

删除索引

curl  -X DELETE "http://127.0.0.1:9200/索引名"

删除30天前的索引记录

curl -X POST "127.0.0.1:9200/索引名/_delete_by_query" -H 'Content-Type: application/json' -d'
{
    "query": {
        "range": { 
            "@timestamp": {
                "lt": "now-30d",
                "format": "epoch_millis"
            }
        }
    }
}
'

crontab 定时清理30天前数据

0 1 * * * /usr/bin/curl -H'Content-Type:application/json' -d'{"query":{"range":{"@timestamp":{"lt":"now-30d","format":"epoch_millis"}}}}' -XPOST "http://127.0.0.1:9200/*-*/_delete_by_query?pretty" > /tmp/elk_clean.txt
 

修改带密码的索引副本数量

curl -u "elastic" -X PUT "192.168.1.55:9200/*/_settings" -H 'Content-Type: application/json' -d'
{
"index" : {
"number_of_replicas" : 2
}
}
'