Delete elasticsearch indexes leave top N

elasticsearch-aging.sh

!/bin/sh
# This scripts deletes expired log-yyyy.mm.dd indexes excepts top X
#
. /etc/profile

# LOG
LOGDIR=$HOME/logs
LOG=$LOGDIR/delete.log

# Elasticsearch host
EL_HOST=http://localhost:9200

# Top x indexes will be preserved.
TOP=10

DATETIME=$(date +%Y-%m-%dT%T%z)

[ -d $LOGDIR ] || mkdir -p $LOGDIR


[ "$1" = "show" ] && {
    curl -s -XGET $EL_HOST/_cat/indices | grep 'log-' | sort -r
    exit;
}

# search expired indexes
indexes=$(curl -s -XGET $EL_HOST/_cat/indices | grep 'log-' | sort -r | tail -n+$((${TOP}+1)) | awk '{ print $3 }')

# delete index
for idx in $indexes
do
    [ "$idx" != "" ] && {
        result=$(curl -s -XDELETE $EL_HOST/$idx)
        echo "$DATETIME $idx $result"
    }
done >> $LOG

#{"acknowledged":true}