Differences

This shows you the differences between two versions of the page.

--- elasticsearch [2018/12/26 16:59] – [Add backup directory to repository] baumi
+++ elasticsearch [2021/08/29 11:33] (current) – [Merge smaller indexes to one large index] baumi
@@ Line 28: / Line 28: @@
   }
 }
+</code>
+==== Create snapshot ====
+<code>
+PUT /_snapshot/backup/snapshot_$date?wait_for_completion=true
 </code>
-{{tag>kb}}
+===== Prune Indices with curator =====
+<code>
+$ cat action.yml
+actions:
+:
+    action: delete_indices
+    description: >-
+      Delete indices older than 5 days (based on index name), for logstash-
+      prefixed indices. Ignore the error if the filter does not result in an
+      actionable list of indices (ignore_empty_list) and If you want to change the retention Days then goto unit_count:<enter no of day>.
+    options:
+      ignore_empty_list: True
+      timeout_override:
+      continue_if_exception: False
+      disable_action: False
+    filters:
+    - filtertype: pattern
+      kind: prefix
+      value: logstash-
+      exclude:
+    - filtertype: age
+      source: name
+      direction: older
+      timestring: '%Y.%m.%d'
+      unit: days
+      unit_count: 90
+      exclude:
+$ cat config.yml
+client:
+  hosts:
+    - elk-elasticsearch
+  port: 9200
+  url_prefix:
+  use_ssl: False
+  certificate:
+  client_cert:
+  client_key:
+  ssl_no_validate: False
+  http_auth:
+  timeout: 30
+  master_only: False
+logging:
+  loglevel: INFO
+  logfile:
+  logformat: default
+  blacklist: ['elasticsearch', 'urllib3']
+$ curator --config ./config.yml action.yml
+</code>
+===== Merge smaller indexes to one large index =====
+<code>
+$ curl --netrc --insecure --request POST --header "Content-Type: application/json" https://elk-elasticsearch:9200/_reindex -d'
+{
+  "source": {
+    "index": "filebeat-7.13.2-2021.07.*"
+  },
+  "dest": {
+    "index": "filebeat-7.13.2-2021.07-000001"
+  }
+}'
+$ curl --netrc --insecure --request PUT --header "Content-Type: application/json" https://elk-elasticsearch:9200/filebeat-7.13.2-2021.07-000001/_alias/filebeat-7.13.2
+</code>
+{{tag>kb elasticsearch}}