查看当前索引
[root@localhost ~]# curl -XGET 'http://10.1.234.200:9200/_cat/indices/?v'
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open .kibana_task_manager_1 F_A0WvfBT76YiIHSgBytEg 1 1 2 2 46.3kb 20.1kb
green open .apm-agent-configuration uwF_zFEOQjSYLOL_ReTQlg 1 1 0 0 566b 283b
green open system-log-1516-2020.08.18 EyqXDXD7R3Cv1E0vqMl-VA 1 1 568 0 378.3kb 174.4kb
green open system-log-1516-2020.08.19 hDNUjDl1TfO5Kl1FV2GxgA 1 1 325 0 220.1kb 117.7kb
green open .kibana_1 kd1Cj1j4TemLjKEuI9cYMQ 1 1 4 0 37.7kb 18.8kb
批量删除30天前的数据
#!/bin/bash
DATE=`date -d "30 days ago" +%Y.%m.%d`
INDEX="
system-log-1516
linux40-nginx-errorlog
linux40-nginx-accesslog-redis
"
for i in $INDEX
do
# echo $i , $DATE
curl -XDELETE http://10.1.234.200:9200/$i-$DATE
if [ $? -eq 0 ];then
echo $DATE"-->del $i log success.." >> /tmp/es-index-clear.log
else
echo $DATE"-->del $i log fail.." >> /tmp/es-index-clear.log
fi
done
添加到计划任务
0 6 * * * /root/es.index.delete.sh