Elasticsearch curator deletes the whole index rather than deleting logs of 6 days

Question

I had set up the action file which was deleting 6 days data of elasticsearch using Elasticsearch Curator. But from yesterday its deleting the whole index rather than deleting data of 6 days.

actions:
  1:
    action: delete_indices
    description: >-
      Delete indices older than 6 days
    options:
     ignore_empty_list: True
     timeout_override:
     continue_if_exception: False
     disable_action: False
    filters:
    - filtertype: pattern
      kind: regex
      value: '^pds-cnnfr-usw2.*$'
    - filtertype: age
      source: creation_date
      direction: older
      unit: days
      unit_count: 6

Answer 1

I recommend using the ILM policy rather than the curator. The curator was exist because the ILM was on the paid version before ESv7:).

https://www.elastic.co/guide/en/elasticsearch/reference/7.17/index-lifecycle-management.html https://www.elastic.co/guide/en/elasticsearch/reference/7.17/index-rollover.html