Delete indices by date (Elasticsearch 8.7)

Hello. I created index from logstash (%{[project][name]}-%{[project][service]}-%{+YYYY.MM.dd}), and I want to keep only last 10 days logs.
How can I delete automatically older data?

Hi @Suren_Baboyan,

Welcome to the community! You can use ILM to delete older indices. Here are some resources to help you get started:

Also do add to this, if you are using Logstash then you should let it use ILM and not use time based indices like you have :slight_smile:

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.