Hi friends, I have 3 index. how can i delete data form these index if it is more than 2 months. I know can use ILM policy but my index is created from elastalert whereby i cant use ILM policy as it wont append timestamp-version. therefore i need manually delete . Can we use curl for this?
In this case your only option would be to use the Delete by Query API
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.