open search 设置自动过期删除策略

1、创建策略

PUT _plugins/_ism/policies/rollover_policy
{
  "policy": {
    "description": "Example rollover policy.",
    "default_state": "rollover",
    "states": [
      {
        "name": "rollover",
        "actions": [
          {
            "rollover": {
              "min_doc_count": 1
            }
          }
        ],
        "transitions": []
      }
    ],
    "ism_template": {
      "index_patterns": ["log*"],
      "priority": 100
    }
  }
}

2、更改集群设置以每分钟触发一次作业

PUT /_cluster/settings?pretty=true
{
  "persistent" : {
    "plugins.index_state_management.job_interval" : 1
  }
}

3、rollover_alias使用as设置模板log

PUT _index_template/ism_rollover
{
  "index_patterns": ["log*"],
  "template": {
   "settings": {
    "plugins.index_state_management.rollover_alias": "log"
   }
 }
}

4、接下来，创建一个新索引：

PUT /log-000001
{
  "aliases": {
    "log": {
      "is_write_index": true
    }
  }
}

4、最后，将文档添加到索引以触发作业：

POST /log-000001/_doc
{
  "message": "dummy"
}

5、验证策略是否附加到索引log-000001

GET _plugins/_ism/explain/log-000001?pretty