Curator

From https://www.elastic.co/guide/en/elasticsearch/client/curator/current/about.html#about:

Elasticsearch Curator helps you curate, or manage, your Elasticsearch indices and snapshots by:

  1. Obtaining the full list of indices (or snapshots) from the cluster, as the actionable list

  2. Iterate through a list of user-defined filters to progressively remove indices (or snapshots) from this actionable list as needed.

  3. Perform various actions on the items which remain in the actionable list.

Warning

Starting in Security Onion 2.4.40, Curator is no longer included in Security Onion. To learn more about index maintenance, please see the Elasticsearch section.

More Information