# Delete index older than a week
**URL:** https://discuss.elastic.co/t/delete-index-older-than-a-week/320737
**Category:** Elasticsearch
**Created:** [December 8, 2022, 5:33am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737 "2022-12-08T05:33:58Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 5:33am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/1 "2022-12-08T05:33:58Z")
Currently i have logs from 5 to 6 servers coming to elk. I want to delete all indices older than a week. what is the best way to achieve this? i went through ILM but didn't get the exact way to do this
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 8, 2022, 5:36am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/2 "2022-12-08T05:36:48Z")
[ILM](https://www.elastic.co/guide/en/elasticsearch/reference/current/index-lifecycle-management.html) can definitely do that - [Delete | Elasticsearch Guide [8.5] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/ilm-delete.html)
---
### Author:  [@Venkata\_Raja](https://discuss.elastic.co/u/Venkata_Raja)
#### Post date: [December 8, 2022, 5:38am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/3 "2022-12-08T05:38:14Z")
Are you generating daily indices or one index , If daily indices disable rollover in hot phase and put 7 days at delete phase. if one index , try using rollover after 7 days in hot and put 0 days at delete phase.
For more info:
> **[Tutorial: Automate rollover with ILM | Elasticsearch Guide \[8.5\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/8.5/getting-started-index-lifecycle-management.html#ilm-gs-create-policy)**
---
### Author:  [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 8, 2022, 5:40am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/4 "2022-12-08T05:40:49Z")
The best way and easy way to do it via the Kibana UI.
You can go to Stack Management --\> Index Lifecycle Management --\> Create Policy and here in the Hot phase, set the number of days you want a particular index to be in Elasticsearch and then remove the Cold phase.
Automatically after 7 days the data will be deleted.
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 5:41am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/5 "2022-12-08T05:41:31Z")
When i select ILm and create a new policy i am only getting hot, warm and cold phase. no delete phase. Indices are created on a daily basis index\_name-@timestamp i want to delete all indices after 7 days
---
### Author:  [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 8, 2022, 5:43am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/6 "2022-12-08T05:43:13Z")
In hot phase, you'll expand in advance settings, you'll find infinite and delete symbol on your right.
Change from infinite to delete.
The delete phase will appear.
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 5:45am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/7 "2022-12-08T05:45:43Z")
Is this configuration going to delete indices older than 2 days?
---
### Author:  [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 8, 2022, 5:47am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/8 "2022-12-08T05:47:14Z")
Yes, it'll.
---
### Author:  [@Venkata\_Raja](https://discuss.elastic.co/u/Venkata_Raja)
#### Post date: [December 8, 2022, 5:47am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/9 "2022-12-08T05:47:50Z")
Click on Advanced settings in hot phase , turn off enable rollover then data will be deleted after 2 days if you put 2 days in delete phase
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 5:48am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/10 "2022-12-08T05:48:07Z")
ok. so i saved it. and now on the index when i try to add policy to it i am getting this
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 5:55am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/11 "2022-12-08T05:55:48Z")
Ok. So currently in the policy ive selected delete this index after this phase and disabled the enable rollover. and in delete phase i've set it to two days. So i have a index say index\_name-@timestamp with timestamp of 5 days old. will it delete all indices older than 2 days?
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 5:57am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/12 "2022-12-08T05:57:14Z")
But daily a new index is getting created with the date. How can i attach a policy to this index? i mean which index should i apply this policy on
---
### Author:  [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 8, 2022, 5:58am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/13 "2022-12-08T05:58:51Z")
All these indexes will have an alias name, and using that it identifies the indices.
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 5:59am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/14 "2022-12-08T05:59:43Z")
how can i give the alias name?
---
### Author:  [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 8, 2022, 6:01am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/15 "2022-12-08T06:01:57Z")
please go through the URL which @Venkata_Raja has given.
It tells you everything which is required.
Thanks.
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 7:25am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/16 "2022-12-08T07:25:48Z")
I went through the doc u shared. but i am not getting anything. I've created a policy as u said. But i am confused as to how to create a template, alias and al.
---
### Author:  [@Venkata\_Raja](https://discuss.elastic.co/u/Venkata_Raja)
#### Post date: [December 8, 2022, 7:28am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/17 "2022-12-08T07:28:51Z")
Alias was not needed in your case i guess as you are disabling rollover. Just create an Index template with the exact pattern that will match all your indices and attach ILM policy to that index as shown in that link.
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 7:39am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/18 "2022-12-08T07:39:09Z")
ok. I'm stuck in creating index template only. i selected create new template. as there was no existing template for all my indices
skipped all the other steps after entering the index pattern.
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 7:44am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/19 "2022-12-08T07:44:42Z")
created policy. created template that matches all the indices, with no other settings. mapped the policy to the index which has timestamp attached to it? how to attach it to the template?
---
### Author:  [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)
#### Post date: [December 8, 2022, 9:34am UTC](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737/20 "2022-12-08T09:34:23Z")
I created the index template with these settings
```auto
{
"index": {
"lifecycle": {
"name": "indices-10"
},
"number_of_shards": "1",
"number_of_replicas": "1"
}
}
```
indices-10 policy is
```auto
PUT _ilm/policy/indices-10
{
"policy": {
"phases": {
"hot": {
"min_age": "0ms",
"actions": {
"set_priority": {
"priority": 100
}
}
},
"delete": {
"min_age": "2d",
"actions": {
"delete": {
"delete_searchable_snapshot": true
}
}
}
}
}
}
```
Do i need to make any changes to logstash config? how will this start working? how can i test it or apply it?
logstash config
```auto
input {
beats {
port => 5044
}
}
output {
elasticsearch {
hosts => "http://*.*.*.*:9200"
index => "%{type}%{+YYYY.MM.dd}"
user => "e***"
password => " *****"
}
}
```
[Next page](https://discuss.elastic.co/t/delete-index-older-than-a-week/320737.md?page=2)