如果使用curl将ELK安装在docker容器中，则删除旧的Elasticsearch索引

Question

ELK安装在docker上。由于旧的日志和索引，服务器硬盘容量变满，导致ELK容器崩溃。

Answer 1

在安装了elk的docker shell上运行shell脚本

bash#！//bash

DAYSAGO=date --date="200 days ago" +%Y%m%d ALLLINES=/usr/bin/curl -s -XGET http://127.0.0.1:9200/_cat/indices?v | egrep logstash

echo echo“这是ELK应该删除的内容：”echo

echo "$ALLLINES“| while read LINE do FORMATEDLINE=echo $LINE | awk '{ print $3 }' | awk -F'-' '{ print $2 }' | sed 's/\.//g' if "$FORMATEDLINE”-lt "$DAYSAGO“then TODELETE=echo $LINE | awk '{ print $3 }' echo "http://127.0.0.1:9200/$TODELETE”fi done

echo echo -n“如果这有意义，Y继续N退出Y/N:“read INPUT if "$INPUT”== "Y“|| "$INPUT”== "y“|| "$INPUT”== "YES“|| "$INPUT”== "yes“then echo "$ALLLINES”| while read LINE do FORMATEDLINE=echo $LINE | awk '{ print $3 }' | awk -F'-' '{ print $2 }' | sed 's/\.//g' if "$FORMATEDLINE“-lt "$DAYSAGO”then TODELETE=echo $LINE | awk '{ print $3 }' /usr/bin/curl -XDELETE http://127.0.0.1:9200/$TODELETE sleep 1 fi已由用户关闭回显脚本，再见...回声退出fi