I had a lot of fun writing what was once
logstash_index_cleaner.py. That script was then rolled into Logstash’s
expire-logs github repository. It’s been through several revisions and iterations since then, but the newest incarnation is the best. Check out my blog post at elasticsearch.org on the new-and-improved Curator.