--newer-than

This flag only functions within the scope of index selection or snapshot selection.

Filter indices "newer than" the given number of time-units. The indices must also have a --timestring.

The value provided indicates a given number of time-units ago to use as a reference point. All indices "newer than" that point will be included.

--newer-than Include only indices newer than n time-units
--time-unit Unit of time to reckon by. Can be one of hours, days, weeks, or months
--timestring Python strftime string to match your index definition. 2014.07.15 would be %Y.%m.%d

Snapshot daily Logstash indices newer than 2 days:

curator snapshot --repository REPO indices --time-unit days --newer-than 2 --timestring '%Y.%m.%d' --prefix logstash