POST /_fleet/maintenance/cleanup?

[Juan_de_Dios_Macias1 (Juan de Dios Macías)]

Hi, I have a cluster with a single node where I’m seeing some indices that I can’t delete because Elasticsearch tells me that my elastic user needs superuser permissions. I found the API request POST /_fleet/maintenance/cleanup, but I can’t find anything in the Elastic documentation that explains whether it might affect other parts of the system. Could you help me understand what it does?

{
"failed_step": "delete",
"step_info": {
"type": "security_exception",
"reason": "action [indices:admin/delete] is unauthorized for user [elastic] with effective roles [superuser] on restricted indices [.ds-.fleet-actions-results-2025.03.03-000040], this action is granted by the index privileges [delete_index,manage,all]"
}
}

[Tortoise]

Hello @Juan_de_Dios_Macias1

Welcome to the Community!!

Could you please share the elastic documentation link related to cleanup API ?

POST /_fleet/maintenance/cleanup

As per the error message it failed for index : .ds-.fleet-actions-results-2025.03.03-000040

Please share what we are trying to achieve on this single node cluster when you say cleanup?

For Cannot delete an index with elastic there is similar blog with solution :

Cannot DELETE Index with Superuser

Hello, I have a problem on my Elasticsearch, i cannot delete an index with a superuser : I have some .reporting index, and i want to apply an ILM to this index because i dont need the old .reportng index. After changing the ILM specifying the deletion of indexes after X days, the old indexes entered the deletion stage. But, when ILM try to DELETE the olds index, this error occured : security_exception: action [indices:admin/delete] is unauthorized for user [admin] with roles [superuser] on i…

How to delete system indices?

Hi all, My current cluster is an upgraded cluster from version 7.x to 8.x It has alot of system indices that nolonger require in the cluster but whenever i tried to delete it. I got this message { "error": { "root_cause": [ { "type": "security_exception", "reason": "action [indices:admin/delete] is unauthorized for user [elastic] with effective roles [superuser] on restricted indices [.kibana_8.6.2_001], this action is granted by the index privileges [delete_index,…

Thanks!!