ElasticSearch

Remove_indices_older_than.md

删除某个时间点前的indics

# 列出当前所有indics
curl -k  "https://localhost:9200/_cat/indices"

curl -k -X POST "http://localhost:9200/graylog_148/_delete_by_query?pretty" -H 'Content-Type: application/json' -d'
{
  "query": {
    "bool": {
      "filter": [
        {
          "range": {
            "@timestamp": {
              "lt": "now-1d"
            }
          }
        }
      ]
    }
  }
}