• Delete logstash data older than 30 day

30 0 * * * /usr/bin/curator --host 127.0.0.1 delete indices --older-than 30 --time-unit days --timestring '%Y.%m.%d'
40 0 * * * /usr/bin/curator --host 127.0.0.1 close indices --older-than 30 --time-unit days --timestring '%Y.%m.%d'

new option on curator 5

curator_cli --host 127.0.0.1 delete_indices --filter_list '{"filtertype":"age","source":"name","timestring":"%Y.%m.%d","unit":"days","unit_count":30,"direction":"older"}'