Have been trying ELK for a while now...still not in production and a lot of things aren't working. I've a feeling that something is a bit screwy. I have stopped everything send data to my ELK stack and cleared all indices, yet there is still 11GB of data in my Data drive, 30GB in Elasticsearch\logs and 4GB in logstash\logs.
I don't want to wipe the system and rebuild it, but...is there away to clear ALL data and logs?
I have backed up and documented everything