A newer version is available. For the latest information, see the current release documentation.
« disk_space exclude »
Elastic Docs ›Curator Reference [5.1] ›Filter Elements

epoch

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

epoch

edit

This setting is available in the age filtertype, and any filter which has the use_age setting. This setting is strictly optional.

This setting is not common. It is most frequently used for testing.

unit, unit_count, and optionally, epoch, are used by Curator to establish the moment in time point of reference with this formula:

point_of_reference = epoch - ((number of seconds in unit) * unit_count)

If epoch is unset, the current time is used. It is possible to set a point of reference in the future by using a negative value for unit_count.

Example

edit
 - filtertype: age
   source: creation_date
   direction: older
   unit: days
   unit_count: 3
   epoch: 1491577200

The value for this setting must be an epoch timestamp. In this example, the given epoch time of 1491577200 is 2017-04-04T15:00:00Z (UTC). This will use 3 days older than that timestamp as the point of reference for age comparisons.

« disk_space exclude »