LotharKAtt
9/20/2017 - 8:15 AM

ElasticSearch

root@sdp-vslogv-01:/var/lib/elasticsearch# curl -XGET http://10.25.12.101:9200/_cluster/health?pretty=true
{
  "cluster_name" : "elasticsearch",
  "status" : "red",
  "timed_out" : false,
  "number_of_nodes" : 2,
  "number_of_data_nodes" : 2,
  "active_primary_shards" : 345,
  "active_shards" : 415,
  "relocating_shards" : 0,
  "initializing_shards" : 1,
  "unassigned_shards" : 282,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 242,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 216,
  "active_shards_percent_as_number" : 59.45558739255014
}

curl -XPUT 10.25.12.103:9200/_cluster/settings -d '{
    "transient" : {
        "cluster.routing.allocation.disk.threshold_enabled" : true
    }
}'

curator --host 10.0.0.2 delete indices --older-than 30 --time-unit days \
   --timestring '%Y.%m.%d'
curator delete indices --older-than 20 --timestring %Y.%m.%d --time-unit days --prefix logstash

actions:
  0:
    action: delete_indices
    description: >-
      Delete indices older than 20
    options:
      ignore_empty_list: True
      disable_action: True
    filters:
    - filtertype: pattern
      kind: prefix
      value: logstash-
    - filtertype: age
      source: name
      direction: older
      timestring: '%Y.%m.%d'
      unit: days
      unit_count: 20


      root@sdp-vslogv-01:~# curl -XDELETE 10.25.12.101:9200/rsyslog-2017.05.03
      {"acknowledged":true}

[lotharkatt@T460s Work ]$