From 1089993579db49894d13540e386fbc630bdc44b3 Mon Sep 17 00:00:00 2001
From: Marco Ochse <t3chn0m4g3@users.noreply.github.com>
Date: Wed, 2 Mar 2016 16:21:17 +0100
Subject: [PATCH] update housekeeping for elasticsearch, keep indexes for <=90
 days

---
 installer/install.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/installer/install.sh b/installer/install.sh
index 95b5e696..2a5dc459 100755
--- a/installer/install.sh
+++ b/installer/install.sh
@@ -3,7 +3,7 @@
 # T-Pot post install script                            #
 # Ubuntu server 14.04.3, x64                           #
 #                                                      #
-# v16.03.10 by mo, DTAG, 2016-02-19                    #
+# v16.03.11 by mo, DTAG, 2016-03-02                    #
 ########################################################
 
 # Type of install, SENSOR, INDUSTRIAL or FULL?
@@ -273,8 +273,8 @@ tee -a /etc/crontab <<EOF
 # Restart docker service and containers
 27 3 * * *    root 	dcres.sh
 
-# Delete elastic indices older than 30 days
-27 4 * * *    root  docker exec elk bash -c '/usr/local/bin/curator --host 127.0.0.1 delete --older-than 30'
+# Delete elastic indices older than 90 days (kibana index is omitted by default)
+27 4 * * *    root  docker exec elk bash -c '/usr/local/bin/curator --host 127.0.0.1 delete indices --older-than 90 --time-unit days --timestring '%Y.%m.%d''
 
 # Update IP and erase check.lock if it exists
 27 15 * * *   root  /etc/rc.local