Unable to delete documents from full index

[Tortoise]

Hello @fgjensen

Looking at the blogs seems your version must be 7.3.2 , could you please confirm?

Node crashes due to max number of docs exceeded, but ILM should've not let it happen

We have been running 7.3 for a month now, and looking at ILM explain results, it is seen that the indices were getting rolled over at 50GB everytime. Even the last index, metricbeat-7.3.0-0000050 rolled over correctly from 49. The 51st rollover also worked as expected. I can't do a dry run on that index now as I had to delete it to get the nodes started. But given that previous rollovers were successful, it might not be a problem with rollover itself? After deleting the old 51 Index, I created…

I believe split API can be used as per the below link & i have tried but for smaller index :

Allow Document Deletion From Full Shards

GET kibana_logs_success/_count #14074

PUT /kibana_logs_success/_block/write

POST /kibana_logs_success/_split/kibana_sample_logs_split
{
  "settings": {
    "index.number_of_shards": 10
  }
}

GET kibana_sample_logs_split/_count

I used 10 primary shards you can consider a lower number :

Thanks!!