Hi,
An alternative approach could be to use the "delete by query" API on the hot or warm tiers before the data is moved to the frozen tier. This would allow you to delete specific documents based on a query. However, this would require you to identify and delete the data before it is moved to the frozen tier by the ILM policy.
Regards