--older-than

This flag only functions within the scope of index selection or snapshot selection.

Filter indices "older than" a given number of time-units. The indices must also have a --timestring.

The value provided indicates a given number of time-units ago to use as a reference point. All indices "older than" that point will be included.

--older-than Include only indices older than n time-units
--time-unit Unit of time to reckon by. Can be one of hours, days, weeks, or months
--timestring Python strftime string to match your index definition. 2014.07.15 would be %Y.%m.%d

Delete hourly Logstash indices older than 48 hours:

curator delete indices --time-unit hours --older-than 48 --timestring '%Y.%m.%d.%H' --prefix logstash