From 1abd824c5f136ff1bf395793179ab2d70362032d Mon Sep 17 00:00:00 2001
From: Doug Burks <doug.burks@gmail.com>
Date: Mon, 21 Feb 2022 09:00:05 -0500
Subject: [PATCH] FIX: curator should exclude so-case* indices #7270

---
 salt/curator/files/action/delete.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/salt/curator/files/action/delete.yml b/salt/curator/files/action/delete.yml
index fb3945c1d..6e31b03b6 100644
--- a/salt/curator/files/action/delete.yml
+++ b/salt/curator/files/action/delete.yml
@@ -18,6 +18,10 @@ actions:
     - filtertype: pattern
       kind: regex
       value: '^(logstash-.*|so-.*)$'
+    - filtertype: pattern
+      kind: regex
+      value: '^(so-case.*)$'
+      exclude: True
     - filtertype: space
       source: creation_date
       use_age: True