Hello. I created index from logstash (%{[project][name]}-%{[project][service]}-%{+YYYY.MM.dd}), and I want to keep only last 10 days logs. How can I delete automatically older data?

Hi @Suren_Baboyan , Welcome to the community! You can use ILM to delete older indices. Here are some resources to help you get started: Discuss topic: how to delete the indices older than 30 days ILM: Manage the Index Lifecycle Tutorial: Automate rollover with ILM Configure a lifecycle policy ILM …

Discuss the Elastic Stack

Delete indices by date (Elasticsearch 8.7)

Elastic Stack Elasticsearch

carly.richmond (Carly Richmond) April 25, 2023, 3:15pm 2

Hi @Suren_Baboyan,

Welcome to the community! You can use ILM to delete older indices. Here are some resources to help you get started:

Discuss topic: how to delete the indices older than 30 days
ILM: Manage the Index Lifecycle
Tutorial: Automate rollover with ILM
Configure a lifecycle policy
ILM with Logstash

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.