This image holds a simple curator for elasticsearch. A first task when deploying a en ELK/ELF stack is to set up simple retention, to avoid bloating the indices quickly.
This image uses bobrik/curator as base, and adds automated time based cleanup with a retention in days.
Basicly, it sleeps for a bit, then runs the cleanup filter, and a common usecase is to have something like 7 days worth of log retention, and cleanup running daily (This is also the default setup for this image).
This makes this image suitable for docker-compose and cluster deployment, unlike the base image:
curator:
image: stixes/simple-curator
links:
- elasticsearch:elasticsearch
environment:
CURATOR_SLEEP_SECS: 86400 # 24h
CURATOR_INDEX_PATTERN: logstash-*
CURATOR_RETENTION_DAYS: 5
The image assumes elasticsearch running on default ports.