I deleted a month older indexes but now i see it's getting created again. I believe filebeat maintains registry_file and was not expecting to re-send log data. Filbeat configuration are default, i configured prospectors only.
Please suggest how can i delete indexes, can i put logic in logstash conf to filter old file at all?
Month older log files still exists in the file system, that's another issue i am fixing now.
Thanks & Regards,