IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

field

edit

This setting is available in the age filtertype, and any filter which has the use_age setting. This setting is strictly optional.

 - filtertype: age
   source: field_stats
   direction: older
   unit: days
   unit_count: 3
   field: '@timestamp'
   stats_result: min_value

The value of this setting must be a timestamp field name. This field must be present in the indices being filtered or an exception will be raised, and execution will halt.

In Curator 5.3 and older, source field_stats uses the Field Stats API to calculate either the min_value or the max_value of the field as the stats_result, and then use that value for age comparisons. In 5.4 and above, even though it is still called field_stats, it uses an aggregation to calculate the same values, as the field_stats API is no longer used in Elasticsearch 6.x and up.

This setting is only used when source is field_stats.

The default value for this setting is @timestamp.