mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-10-13 09:45:37 +02:00
FIX: curator should exclude so-case* indices #7270
This commit is contained in:
1 parent
fc0e27a7ae
commit
1abd824c5f
1 file changed
+4
@@ -18,6 +18,10 @@ actions:
|
||||
- filtertype: pattern
|
||||
kind: regex
|
||||
value: '^(logstash-.*|so-.*)$'
|
||||
- filtertype: pattern
|
||||
kind: regex
|
||||
value: '^(so-case.*)$'
|
||||
exclude: True
|
||||
- filtertype: space
|
||||
source: creation_date
|
||||
use_age: True
|
||||
|
||||
Reference in new issue
Block a user