Remove-OldbeatsIndices.ps1

Remove-OldbeatsIndices.ps1

$ElasticSearchURL = 'https://<elasticsearchurl>:<port>'
$indices = (iwr "$ElasticSearchURL/_cat/indices?format=json&pretty").content | ConvertFrom-Json
$indices.Index | ?{$_ -match '\d{4}\.\d\d\.\d\d$'} | sort
$IndicesWithDate = $indices | ?{$_.index -like '*beat-*'} | select index,@{L="Date";E={get-date ($_.index -split '-')[1]}}
$indicesToDelete = $IndicesWithDate | ?{$_.date -lt (Get-Date).AddDays(-7)}


foreach($index in $indicesToDelete){
    $index.index
    iwr "$ElasticSearchURL/$($index.index)" -Method delete
}