owner: logstash
group: logstash
mode: 0775
- name: Create Curator configuration files.
template:
src: "{{ item }}.j2"
dest: "/etc/curator/{{ item }}"
owner: logstash
group: logstash
mode: 0644
with_items:
- curator_cluster_config.yml
- delete30DaysOldDebugIndices.yml
- delete180DaysOldInfoIndices.yml
ignore_errors: yes
Настройки Curator
---
# Remember, leave a key empty if there is no value. None will be a string,
# not a Python "NoneType"
client:
hosts:
- {{ logstash.output_hosts }}
port: 443
url_prefix:
use_ssl: False
certificate:
client_cert:
client_key:
aws_key: "{{ logstash.elastic_key_id | default(logstash.aws_access_key_id) }}"
aws_secret_key: "{{ logstash.elastic_secret_access_key |
default(logstash.aws_secret_access_key) }}"
aws_region: {{ logstash.region }}
ssl_no_validate: False
http_auth:
timeout: 30
master_only: False
logging:
loglevel: INFO
logfile:
logformat: default
blacklist: ['elasticsearch', 'urllib3']
Удаление индексов старше 180 дней
actions:
1:
action: delete_indices
description: >-
"Delete info indices older than 180 days (based on index name), for (logstash-info)."
options:
timeout_override: 300