One other thing I do when I have a small POC cluster I also update the ILM policy to make each index 10GB that way you can clean up smaller chunks
PUT /_ilm/policy/metricbeat
{
"policy" : {
"phases" : {
"hot" : {
"min_age" : "0ms",
"actions" : {
"rollover" : {
"max_size" : "10gb",
"max_age" : "30d"
}
}
}
}
}
}
Then you can figure out your delete phase
You can do all this through Kibana UI -> Stack Managenent -> Index Lifecycle Policies