Elasticsearch Curator helps you curate, or manage, your Elasticsearch indices and snapshots by:

  1. Obtaining the full list of indices (or snapshots) from the cluster, as the actionable list
  2. Iterate through a list of user-defined filters to progressively remove indices (or snapshots) from this actionable list as needed.
  3. Perform various actions on the items which remain in the actionable list.


Curator defaults to closing indices older than 30 days. Curator also deletes old indices to prevent your disk from filling up.

Curator configuration can be found by going to Administration –> Configuration –> curator.


For more information about the Curator close and delete settings, please see the Elasticsearch section.

Diagnostic Logging

When Curator completes an action, it logs its activity in a log file found in /opt/so/log/curator/. Depending on what you’re looking for, you may also need to look at the Docker logs for the container:

sudo docker logs so-curator

More Information