Suddenly after normal work of the team we suffered a big amount of metrics logs, looking at that we discovered that the integrations of elastic-agent and system indexes started to make rollover of all namespaces. Continuing doing rollover altougth they were with 0 documents until it reached the limit of shards.
The ILM policies weren't change so far.
There are some tasks that happenned before:
A colleague incorporate a new agent, with system and elastic-agent integration
Another modify some custom integration.
Is quite weird to be honest. Any insigth or help?
Let me know if you have questions as wells.