Hello, I created an instance in Elastic Cloud, and I used Fleet to install Metricbeat, Endpoint Security, etc.
My instance started 1GB of RAM, and was costing me $40 a month or so. Now, it is costing me about $300 a month because Elastic Cloud by default, doesn't come with any Index Lifecycle Policies, data comes in and it just keep filing the disk, and I have to increase capacity.
It is a pain to delete data manually. So now I'm looking at creating an IL Policy, but there are TONS of Index Templates to associate the policy to:
It's unclear which ones I should modify to, say, keep the beats and endpoint security data for no more than 2 weeks, should I go through all of them and set a delete action?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.