PUT _cluster/settings
{
  "transient": {
    "cluster.routing.allocation.disk.watermark.low": "85%",
    "cluster.routing.allocation.disk.watermark.high": "90%",
    "cluster.routing.allocation.disk.watermark.flood_stage": "95%",
    "cluster.info.update.interval": "1m"
  }
}


PUT cluster/_settings
{ "transient": { "cluster.routing.allocation.disk.threshold_enabled": false } }

PUT _all/_settings
{"index.blocks.read_only_allow_delete": null}



#### Create delete Policy for Filebeat and metricbeat
PUT _ilm/policy/cleanup-history
{
  "policy": {
    "phases": {
      "hot": {
        "actions": {}
      },
      "delete": {
        "min_age": "30d",
        "actions": {
          "delete": {}
        }
      }
    }
  }
}

## Assign Policy to exiting indexes

PUT /filebeat*/_settings?pretty
{
  "lifecycle.name": "cleanup-history"
}

PUT /metricbeat*/_settings?pretty
{
  "lifecycle.name": "cleanup-history"
}

## Create template for new indexes

PUT /_template/logging_policy_template?pretty
{
"index_patterns": ["fileabeat*", "metricbeat*"], "settings": { "index.lifecycle.name": "cleanup-history" }
}

### Run Deletion index