Hi All,
I have an Elastic cluster with 3 nodes. 1 master and 2 data nodes. Each node has 1TB storage. I need to set up a rollback policy for the indexes.
Per day around 100GB data could be forwarded via beats -> logstash -> elasticsearch.
Need a retention period of 30 days on the indices via roll back policy.
Not sure on how to set up the hot phase and the delete phase so that 1TB of storage is enough to hold the data with the retention period of 30 days.