Live data still persists after rollup

I am rolling creating a rollup index with a 7d delay. The live index I am rolling up from has been around for months. The job has been running fine, but as the rolledup index is written to, I am expecting data that is older than 7 days in the original index to "disappear". Am I incorrect in that assumption?

We are also using ILM to delete old data, but this is set at 60 days.

Rollups shouldn't delete data, as it's meant as a non-destructive process. So the ILM is the only thing used to delete data.

Thank you. Has this policy changed in the recent past, like last year or so?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.