I have some data in Elasticsearch which i want to get rid of. Well, not all of them but that matches a certain search query.
responseElements.assumedRoleUser.arn = arn:aws:sts::xxxxxxx:assumed-role/ReadOnly/Instance_Crawler
Above is a field in cloudtrail data that i want to get rid of. How can i achieve such a thing where i delete all the documents that matches thing query.