elk 批量删除索引

cat clean_UNASSIGNED_index_注意过滤保留时间.sh

#!/bin/bash

#建议保留两个月前的
#注意：删掉索引后，日志数据也会被删除，注意是否需要保留再进行删除

#curl -u elastic:xxxxx -XGET 'http://xxxxxx:9200/_cat/shards' | grep UNASSIGNED| grep -v "monitoring\|watcher\|kibana\|security\|reporting\|watches" | awk '{print $1}' |uniq > ./index_UNASSIGNED.txt

for i in `cat index_UNASSIGNED.txt`
do 
      echo $i
      curl -u elastic:xxxxx -XDELETE  http://xxxxxxxxxx:9200/$i
done