1The different <<fe_kind,`kinds`>> are described as follows:
2
3=== prefix
4
5To match all indices starting with `logstash-`:
6
7[source,yaml]
8-------------
9- filtertype: pattern
10 kind: prefix
11 value: logstash-
12-------------
13
14To match all indices _except_ those starting with `logstash-`:
15
16[source,yaml]
17-------------
18- filtertype: pattern
19 kind: prefix
20 value: logstash-
21 exclude: True
22-------------
23
24=== suffix
25
26To match all indices ending with `-prod`:
27
28[source,yaml]
29-------------
30- filtertype: pattern
31 kind: suffix
32 value: -prod
33-------------
34
35To match all indices _except_ those ending with `-prod`:
36
37[source,yaml]
38-------------
39- filtertype: pattern
40 kind: suffix
41 value: -prod
42 exclude: True
43-------------
44
45=== timestring
46
47IMPORTANT: No age calculation takes place here. It is strictly a pattern match.
48
49To match all indices with a Year.month.day pattern, like `index-2017.04.01`:
50
51[source,yaml]
52-------------
53- filtertype: pattern
54 kind: timestring
55 value: '%Y.%m.%d'
56-------------
57
58To match all indices _except_ those with a Year.month.day pattern, like
59`index-2017.04.01`:
60
61[source,yaml]
62-------------
63- filtertype: pattern
64 kind: timestring
65 value: '%Y.%m.%d'
66 exclude: True
67-------------
68
69include::inc_timestring_regex.asciidoc[]
70
71=== regex
72
73This <<fe_kind,`kind`>> allows you to design a regular-expression to match
74indices or snapshots:
75
76To match all indices starting with `a-`, `b-`, or `c-`:
77
78[source,yaml]
79-------------
80- filtertype: pattern
81 kind: regex
82 value: '^a-|^b-|^c-'
83-------------
84
85To match all indices _except_ those starting with `a-`, `b-`, or `c-`:
86
87[source,yaml]
88-------------
89- filtertype: pattern
90 kind: regex
91 value: '^a-|^b-|^c-'
92 exclude: True
93-------------
94