Use ILM to manage internal indices #38470
Description
Now that we have a system for curating indices built-in to Elasticsearch in Index Lifecycle Management, we should use this for internal indices which either already roll over through another mechanism or would benefit from automatically rolling over.
Some of this work has already been completed, see #37443 for an example.
Internal indices which we may want to manage this way include:
- Watcher
-
.watch-history-*
-
- Monitoring
-
.monitoring-alerts-* -
.monitoring-beats-* -
.monitoring-es-* -
.monitoring-kibana-* -
.monitoring-logstash-*
-
- ML (maybe?)
-
.ml-anomalies-* -
.ml-state-*
-
The above list is preliminary and may be missing indices or contain indices we may choose to not manage with ILM.