# ILM - Frozen Tier - Searchable Snapshot

**URL:** <https://discuss.elastic.co/t/ilm-frozen-tier-searchable-snapshot/268599>\
**Category:** Kibana\
**Tags:** ilm-index-lifecycle-management\
**Created:** [March 28, 2021, 5:38pm UTC](https://discuss.elastic.co/t/ilm-frozen-tier-searchable-snapshot/268599 "2021-03-28T17:38:43Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![austinsonger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austinsonger/32/78994_2.png) [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Post date:** [March 28, 2021, 5:38pm UTC](https://discuss.elastic.co/t/ilm-frozen-tier-searchable-snapshot/268599/1 "2021-03-28T17:38:43Z")

</div>

Please read the image for my question:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/9/09a5f750e29b06e6bb196f48b60e3a3b10fbc421.png)

---

<div class="post-metadata">

**Author:** ![dakrone](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dakrone/32/23351_2.png) [@dakrone](https://discuss.elastic.co/u/dakrone)\
**Post date:** [March 29, 2021, 5:49pm UTC](https://discuss.elastic.co/t/ilm-frozen-tier-searchable-snapshot/268599/2 "2021-03-29T17:49:01Z")

</div>

Hi austinsonger,

Generally, please ask the question with text, as images aren't indexed for other users searching that might have the same question.

To answer your question, if you use the `delete` phase within ILM, on the delete action itself is an option (`delete_searchable_snapshot`) that lets you choose whether to delete the snapshot when the index is deleted. By default the snapshot is deleted.

If you manually deleted the index with something like `curl -XDELETE esserver:9200/myindex`, then the snapshot would still remain.

---

<div class="post-metadata">

**Author:** ![austinsonger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austinsonger/32/78994_2.png) [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Post date:** [March 29, 2021, 8:46pm UTC](https://discuss.elastic.co/t/ilm-frozen-tier-searchable-snapshot/268599/3 "2021-03-29T20:46:56Z")

</div>

Okay so if I set it to `forever` and and delete the index manually, then the snapshot will still be searchable? I use Elastic for Security and keeping data is useful, but I also want to keep storage under control for hot and warm tier.

---

<div class="post-metadata">

**Author:** ![dakrone](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dakrone/32/23351_2.png) [@dakrone](https://discuss.elastic.co/u/dakrone)\
**Post date:** [March 29, 2021, 9:16pm UTC](https://discuss.elastic.co/t/ilm-frozen-tier-searchable-snapshot/268599/4 "2021-03-29T21:16:49Z")

</div>

> [@austinsonger](#):
>
> Okay so if I set it to `forever` and and delete the index manually, then the snapshot will still be searchable?

No, you don't need to do that. For a frozen tier searchable snapshot (a `shared_cache` storage type) the original index is removed when it is converted to a searchable snapshot. So as soon as the conversion is done the "local" disk will be freed, and all the queries will use the cache/repository.

For a cold phase searchable snapshot (which is a `full_copy` storage type), an entire copy is kept locally, but no replicas are kept in the cluster (because the repository provides the replicas).

You don't need to delete the original index when converting in either case, ILM takes care of that.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 26, 2021, 9:17pm UTC](https://discuss.elastic.co/t/ilm-frozen-tier-searchable-snapshot/268599/5 "2021-04-26T21:17:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.