Curator script for closing old indices

close-server-logs.yml

actions:
  1:
    action: close
    description: >-
      Close indices older than 2 days (based on index name), for logstash
      and beat indices.
    options:
      delete_aliases: False
      timeout_override:
      continue_if_exception: False
      disable_action: False
    filters:
    - filtertype: closed
      exclude: True
    - filtertype: pattern
      kind: prefix
      value: (\%\{\[@metadata\]\[beat\]\}|logstash|filebeat|topbeat)-
      exclude:
    - filtertype: age
      source: name
      direction: older
      timestring: '%Y.%m.%d'
      unit: days
      unit_count: 2
      exclude: