I noticed curator failed on logstash2026 last night, apparently a race between DELETE and then trying to find the indices again to attempt the deletion again
Oct 10 00:42:07 logstash2026 curator[3694024]: 2023-10-10 00:42:07,175 INFO Deleting 6 selected indices: ['logstash-webrequest-1-7.0.0-1-20 23.07.11', 'logstash-deploy-1-7.0.0-1-2023.07.11', 'logstash-syslog-1-7.0.0-1-2023.07.11', 'logstash-mediawiki-1-7.0.0-1-2023.07.11', 'logstash-k8s-1-7.0.0-1-2023.07.11', 'logstash-default-1-7.0.0-1-2023.07.11'] Oct 10 00:42:07 logstash2026 curator[3694024]: 2023-10-10 00:42:07,175 INFO ---deleting index logstash-webrequest-1-7.0.0-1-2023.07.11 Oct 10 00:42:07 logstash2026 curator[3694024]: 2023-10-10 00:42:07,176 INFO ---deleting index logstash-deploy-1-7.0.0-1-2023.07.11 Oct 10 00:42:07 logstash2026 curator[3694024]: 2023-10-10 00:42:07,176 INFO ---deleting index logstash-syslog-1-7.0.0-1-2023.07.11 Oct 10 00:42:07 logstash2026 curator[3694024]: 2023-10-10 00:42:07,176 INFO ---deleting index logstash-mediawiki-1-7.0.0-1-2023.07.11 Oct 10 00:42:07 logstash2026 curator[3694024]: 2023-10-10 00:42:07,176 INFO ---deleting index logstash-k8s-1-7.0.0-1-2023.07.11 Oct 10 00:42:07 logstash2026 curator[3694024]: 2023-10-10 00:42:07,176 INFO ---deleting index logstash-default-1-7.0.0-1-2023.07.11 Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,079 INFO DELETE http://127.0.0.1:9200/logstash-default-1-7.0.0-1-2023.07 .11,logstash-deploy-1-7.0.0-1-2023.07.11,logstash-k8s-1-7.0.0-1-2023.07.11,logstash-mediawiki-1-7.0.0-1-2023.07.11,logstash-syslog-1-7.0.0-1-2023.07.11,logstash-webrequest-1-7.0.0-1-2023.07.11?master_timeout=120s [status:200 request:29.903s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,181 INFO GET http://127.0.0.1:9200/_all/_settings?expand_wildcards=open% 2Cclosed [status:200 request:0.100s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,200 INFO GET http://127.0.0.1:9200/ [status:200 request:0.003s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,303 INFO GET http://127.0.0.1:9200/_all/_settings?expand_wildcards=open% 2Cclosed [status:200 request:0.102s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,316 INFO GET http://127.0.0.1:9200/ [status:200 request:0.002s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,416 INFO GET http://127.0.0.1:9200/_all/_settings?expand_wildcards=open% 2Cclosed [status:200 request:0.100s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,440 INFO GET http://127.0.0.1:9200/ [status:200 request:0.002s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,539 INFO GET http://127.0.0.1:9200/_all/_settings?expand_wildcards=open% 2Cclosed [status:200 request:0.098s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,556 INFO GET http://127.0.0.1:9200/ [status:200 request:0.003s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,652 INFO GET http://127.0.0.1:9200/_all/_settings?expand_wildcards=open% 2Cclosed [status:200 request:0.095s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,664 INFO GET http://127.0.0.1:9200/ [status:200 request:0.002s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,755 INFO GET http://127.0.0.1:9200/_all/_settings?expand_wildcards=open% 2Cclosed [status:200 request:0.090s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,764 INFO GET http://127.0.0.1:9200/ [status:200 request:0.001s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,764 ERROR The following indices failed to delete on try #1: Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,764 ERROR ---logstash-webrequest-1-7.0.0-1-2023.07.11 Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,764 ERROR ---logstash-deploy-1-7.0.0-1-2023.07.11 Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,764 INFO ---deleting index logstash-webrequest-1-7.0.0-1-2023.07.11 Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,764 INFO ---deleting index logstash-deploy-1-7.0.0-1-2023.07.11 Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,768 WARNING DELETE http://127.0.0.1:9200/logstash-deploy-1-7.0.0-1-2023.07. 11,logstash-webrequest-1-7.0.0-1-2023.07.11?master_timeout=120s [status:404 request:0.004s] Oct 10 00:42:37 logstash2026 curator[3694024]: 2023-10-10 00:42:37,768 ERROR Failed to complete action: delete_indices. <class 'curator.exc eptions.FailedExecution'>: Exception encountered. Rerun with loglevel DEBUG and/or check Elasticsearch logs for more information. Exception: NotFoundError(404, 'index_not_found_exception', 'no such index [logstash-deploy-1-7.0.0-1-2023.07.11]', logstash-deploy-1-7.0.0-1-2023.07.11, index_or_alias) Oct 10 00:42:37 logstash2026 systemd[1]: curator_actions_cluster_wide.service: Main process exited, code=exited, status=1/FAILURE Oct 10 00:42:37 logstash2026 systemd[1]: curator_actions_cluster_wide.service: Failed with result 'exit-code'. Oct 10 00:42:37 logstash2026 systemd[1]: Failed to start OpenSearch Curator action cluster_wide. Oct 10 00:42:37 logstash2026 systemd[1]: curator_actions_cluster_wide.service: Consumed 1.542s CPU time.
Filing this for tracking, and see if it comes back, I've kicked off curator manually for now. cc @colewhite