Local Elasticsearch Logstash indices retention cron script.

es_clean.sh

#!/bin/bash
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
local_indices='/var/lib/elasticsearch/elasticsearch/nodes/0/indices'
# retention
i=14
# history verification  for skipped runs
h=10


I=$i
while true; do
        [ $(($i-$I)) -eq $h ] && break
        T=`date -d "-$i days" +%Y.%m.%d`
        if [ -d $local_indices/logstash-$T ]; then
                o=`curl -XDELETE "http://localhost:9200/logstash-$T"`
                echo "logstash-$T - $o"
        else
                echo "logstash-$T - Not Found"
        fi
        i=$(($i+1))
done | sed "s#^#`date` -- #" >> /var/log/es_clean.log