elasticsearch-curator删除索引

1.下载安装

# 安装包下载路径： https://www.elastic.co/guide/en/elasticsearch/client/curator/current/apt-repository.html
# 下载后安装
# rpm -ivh elasticsearch-curator-5.8.4-1.x86_64.rpm

2.修改配置文件

# pwd
/root/es
# ls
curator.yml  delete_indice.yml

# cat curator.yml 
---
client:
  hosts:
    - 172.19.187.207
    - 172.19.187.208
    - 172.19.187.209
  port: 9200
  url_prefix:
  use_ssl: False
  certificate:
  client_cert:
  client_key:
  ssl_no_validate: False
  http_auth: elastic:ES_Elastic_cjx4lW8nX
  timeout: 30
  master_only: False

logging:
  loglevel: INFO
  logfile: /alidata1/admin/logs/es-curator/curator.log
  logformat: default
  blacklist: ['elasticsearch', 'urllib3']


# cat delete_indice.yml 
actions:
  1:
    action: delete_indices
    description: >- 
      删除超过120天的索引（基于索引名称），用于logservice-
      前缀索引。如果过滤器没有导致错误，请忽略错误
      可操作的索引列表（ignore_empty_list）并彻底退出.
    options:
      ignore_empty_list: True
      disable_action: False
    filters:
    - filtertype: pattern
      kind: prefix
      value: logservice-
    - filtertype: age
      source: name
      direction: older
      timestring: '%Y-%m-%d'
      unit: days
      unit_count: 1   ## 修改要保留的天数

3.执行命令删除

# 查看当前存在的索引
# curl -u elastic:ES_Elastic_cjx4lW8nX 172.19.187.207:9200/_cat/indices

# 执行清除索引命令
# curator --config curator.yml  delete_indice.yml 

# 再次查看索引数量
# curl -u elastic:ES_Elastic_cjx4lW8nX 172.19.187.207:9200/_cat/indices