1The different <<fe_kind,`kinds`>> are described as follows: 2 3=== prefix 4 5To match all indices starting with `logstash-`: 6 7[source,yaml] 8------------- 9- filtertype: pattern 10 kind: prefix 11 value: logstash- 12------------- 13 14To match all indices _except_ those starting with `logstash-`: 15 16[source,yaml] 17------------- 18- filtertype: pattern 19 kind: prefix 20 value: logstash- 21 exclude: True 22------------- 23 24=== suffix 25 26To match all indices ending with `-prod`: 27 28[source,yaml] 29------------- 30- filtertype: pattern 31 kind: suffix 32 value: -prod 33------------- 34 35To match all indices _except_ those ending with `-prod`: 36 37[source,yaml] 38------------- 39- filtertype: pattern 40 kind: suffix 41 value: -prod 42 exclude: True 43------------- 44 45=== timestring 46 47IMPORTANT: No age calculation takes place here. It is strictly a pattern match. 48 49To match all indices with a Year.month.day pattern, like `index-2017.04.01`: 50 51[source,yaml] 52------------- 53- filtertype: pattern 54 kind: timestring 55 value: '%Y.%m.%d' 56------------- 57 58To match all indices _except_ those with a Year.month.day pattern, like 59`index-2017.04.01`: 60 61[source,yaml] 62------------- 63- filtertype: pattern 64 kind: timestring 65 value: '%Y.%m.%d' 66 exclude: True 67------------- 68 69include::inc_timestring_regex.asciidoc[] 70 71=== regex 72 73This <<fe_kind,`kind`>> allows you to design a regular-expression to match 74indices or snapshots: 75 76To match all indices starting with `a-`, `b-`, or `c-`: 77 78[source,yaml] 79------------- 80- filtertype: pattern 81 kind: regex 82 value: '^a-|^b-|^c-' 83------------- 84 85To match all indices _except_ those starting with `a-`, `b-`, or `c-`: 86 87[source,yaml] 88------------- 89- filtertype: pattern 90 kind: regex 91 value: '^a-|^b-|^c-' 92 exclude: True 93------------- 94