Sa Curator-om sam namestio da briše indekse starije od 30 dana.
Ovo je config fil
actions:
1:
action: delete_indices
description: >-
Delete indices older than 30 days (based on index name), for logstash-
prefixed indices. Ignore the error if the filter does not result in an
actionable list of indices (ignore_empty_list) and exit cleanly.
options:
ignore_empty_list: True
timeout_override:
continue_if_exception: False
disable_action: False
filters:
- filtertype: pattern
kind: regex
value: '^(panos-traffic-|panos-threat-|panos-system-|panos-config-).*$'
exclude:
- filtertype: age
source: name
direction: older
timestring: '%Y.%m.%d'
unit: days
unit_count: 30
exclude:
ali bih hteo i da ih arhiviram nekako pre nego što se obrišu. I da bude jednostavno uraditi restore tih indeksa po potrebi.
Kako vi rešavate ovo?