Elasticsearch delete data for more than 2 mohts in multiple index

Hi friends, I have 3 index. how can i delete data form these index if it is more than 2 months. I know can use ILM policy but my index is created from elastalert whereby i cant use ILM policy as it wont append timestamp-version. therefore i need manually delete . Can we use curl for this?

In this case your only option would be to use the Delete by Query API

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.