Customising built-in ILM policies

Following are the ILM policies i see which are created by default/

  • logs
  • metrics
  • synthetics

I would like to delete the data after 90 days from the above ILM policies, is it recommended to update the current ILM policies ?

Here is the code snipped of the current metrics ILM policy. Please help me to include the logic, to delete data after 90 days.

PUT _ilm/policy/metrics
  "policy": {
    "phases": {
      "hot": {
        "min_age": "0ms",
        "actions": {
          "rollover": {
            "max_age": "30d",
            "max_primary_shard_size": "50gb"

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.