Disk space based retention of index documents

Elastic Stack Elasticsearch
1

Hi,
I am wondering, if there is a way to configure elasticsearch in a way, that elastic search indices start deleting documents when a certain disk threshold is exceeded?

What I have in mind is a elasticsearch setup, which behaves much like a cyclic logging.

Background is, that I'm thinking about offering a ELK as a Service offering and somehow need an automatic way to manage my elasticsearch in a fixed resource environment (fixed disk size in particular).

Best regards,
Matthias

2

No.

But there is Elasticsearch Curator that can do it if you are using time based indices, which you should be!

3

Thanks Mark, this might do the trick - will take a closer look!