› ›

search_pattern

IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

search_pattern

This setting is only used by the Allocation, Close, Cold2Frozen, Delete Indices, Forcemerge, Index Settings, Open, Replicas, Shrink, and Snapshot actions.

action: delete_indices
description: "Delete selected indices"
options:
  search_pattern: 'index-*,-index-00002,named-1'
filters:
- filtertype: ...

Supports Elasticsearch multi-target syntax.

The value of this option can be a comma-separated list of data streams, indices, and aliases used to limit the request.

To target all data streams and indices, omit this parameter or use *. If using wildcards it is highly recommended to encapsulate the entire search pattern in single quotes, e.g. search_pattern: 'a*,b*,c*'

The default value is *.

Even though * is the default, system indices are filtered by default. This appends the pattern:

EXCLUDE_SYSTEM = (
    '-.kibana*,-.security*,-.watch*,-.triggered_watch*,'
    '-.ml*,-.geoip_databases*,-.logstash*,-.tasks*'
)

« routing_type setting »