I'm using ELK version 6.5.8. Using curator retention period of ES index are maintaining i.e. 7 days. Here is a requirement where I want to keep 3 days data in index & data more than 3 days should compress & got delete after 7 days.
using index.codec: best_compression in elasticsearch.yml file will compress all the data of index.
Need help how to compress data that is more than 3 days old.