storage utilised over 90% and until now I haven't cleaned up any indices.
What would be the perfect way to clean up indices or delete some old index data ?
I've searched a lot but there's too much confusion over the internet.
any method either using UI or using devtools would work
thanks
The best long term option is to use ILM.
For specific indices see Delete index API | Elasticsearch Guide [8.5] | Elastic
hey there mark,
I was expecting a quick reply from you only like yesterday lol.
Setting ILM would be a great choice for the long term, I'm working on it but for an urgent basis another method you said would be Delete index API
So if I run
GET /_cat/indices/*?v&s=pri.store.size:desc
this command to know which index is storing more data
and then I run
DELETE /.ds-logs-endpoint.events.file-default-2022.10.17-000008?pretty
that should clean up storage on the server according to you right??
any affects on the stack by doing this??
If you are using Endpoint then it should be cleaning up for you and it might be better to amend the existing ILM policy to remove data a bit sooner.
Otherwise I would delete older indices first to make sure your dashboards don't show gaps.
If you are using Endpoint then it should be cleaning up for you
Can you please explain this? @warkolm
Otherwise I would delete older indices first to make sure your dashboards don't show gaps.
Sure thing Mark.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.