Elasticsearch delete data for more than 2 mohts in multiple index

Elastic Stack Elasticsearch
1

Hi friends, I have 3 index. how can i delete data form these index if it is more than 2 months. I know can use ILM policy but my index is created from elastalert whereby i cant use ILM policy as it wont append timestamp-version. therefore i need manually delete . Can we use curl for this?

2

In this case your only option would be to use the Delete by Query API

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.