Thank you for your answer @theuntergeek!
Actually i am currently using daily indexes but because i am creating a index per application per day (i am indexing application logs) my number of shards is too high and it are costing too memory of my cluster.
I am wondering how to reduce the number of shards without change my busines rules and i think i could use index aliases with filter, but not.