Using the curator.sh File

Use the curator.sh file to delete indices that are seven days or older. Installing the discoverELKIntegration-nn.nn.n-1.el8.x86_64.rpm file also installs the curator.sh file. In the discoverELKIntegration-nn.nn.n-1.el8.x86_64.rpm file, nn.n.n represents the Unica Discover version. For example, 12.1.2.

Before you begin

See Installing ELK using the RPM file.

About this task

To use the curator.sh file, complete the following steps:

Procedure

  1. By default, a cron job runs daily at 5:00 am to check for indices that are seven days old. If the cron job finds such indices, it deletes them.
  2. You can customize the number of days, from seven days, to a frequency of your choice. To customize the frequency, complete the following steps:
    1. Navigate to /root/.curator.
    2. Open the action.yml file.
    3. Edit the unit_count field to a frequency of your choice. The frequency has to be days. For example, you can change the default 7 to a lesser value like 5 or a higher value like 14.
  3. You can also customize the logfile verbosity. You can set it to INFO or DEBUG. To customize the logfile verbosity, complete the following steps:
    1. Navigate to /root/.curator.
    2. Open the curator.yml file.
    3. In the logging: section, change the value of loglevel to INFO or DEBUG.
    4. The logfile parameter indicates where the generated log file will be saved. For example, /tmp/DC_ELKINTG_Curator.log. It logs the information about the deleted indices.