Delete indices by date (Elasticsearch 8.7)

[Suren_Baboyan]

Hello. I created index from logstash (%{[project][name]}-%{[project][service]}-%{+YYYY.MM.dd}), and I want to keep only last 10 days logs.
How can I delete automatically older data?

[carly.richmond]

Hi @Suren_Baboyan,

Welcome to the community! You can use ILM to delete older indices. Here are some resources to help you get started:

• Discuss topic: how to delete the indices older than 30 days
• ILM: Manage the Index Lifecycle
• Tutorial: Automate rollover with ILM
• Configure a lifecycle policy
• ILM with Logstash

[warkolm (Mark Walkom)]

Also do add to this, if you are using Logstash then you should let it use ILM and not use time based indices like you have