Hi,
Do we have something in ES, so that we can see the "last accessed" time for the index.
This way can close/delete indices in our data cluster which are not accessed since last 6 months or so, OR not at all accessed since they are indexed.
br,
Sunil.