elasticsearch/curator/config/action_delete_winlogbeat.yml

19 lines
433 B
YAML

actions:
3:
action: delete_indices
description: >-
Delete indices. Find which to delete by first limiting the list to logstash-
prefixed indices.
options:
ignore_empty_list: True
disable_action: False
filters:
- filtertype: pattern
kind: prefix
value: winlogbeat-
- filtertype: age
source: creation_date
direction: older
unit: days
unit_count: 10