Merge pull request #7273 from Security-Onion-Solutions/dougburks-patch-1

FIX: curator should exclude so-case* indices #7270
This commit is contained in:
Doug Burks
2022-02-21 09:25:58 -05:00
committed by GitHub

View File

@@ -18,6 +18,10 @@ actions:
- filtertype: pattern - filtertype: pattern
kind: regex kind: regex
value: '^(logstash-.*|so-.*)$' value: '^(logstash-.*|so-.*)$'
- filtertype: pattern
kind: regex
value: '^(so-case.*)$'
exclude: True
- filtertype: space - filtertype: space
source: creation_date source: creation_date
use_age: True use_age: True