very simple powershell script to delete older logstash indexes

es-curator.ps1

# get indexes in "logstash" alias
$indexes = Invoke-RestMethod "http://eshost:9200/logstash/_settings"

# get the names of the indexes
$indexNames = Get-Member -InputObject $indexes -MemberType NoteProperty|%{$_.Name}

# foreach index check its age. If over 10 days, delete it
# "Substring(9)" returns the date part of "logstash-yyyy-mm-dd"
$indexNames|sort |%{
    $datePart = $_.Substring(9)
    $indexAge = [datetime]::UtcNow.Date.Subtract([DateTime]::Parse($datePart)).Days
    if($indexAge -gt 10){
        "Deleting $_"
        $response = Invoke-RestMethod -method delete "http://eshost:9200/$_"
    }
}