# ELK 5.3 - Archive and delete indices

**URL:** https://discuss.elastic.co/t/elk-5-3-archive-and-delete-indices/91285
**Category:** Elasticsearch
**Created:** [June 29, 2017, 1:08pm UTC](https://discuss.elastic.co/t/elk-5-3-archive-and-delete-indices/91285 "2017-06-29T13:08:06Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Greenie](https://avatars.discourse-cdn.com/v4/letter/g/f6c823/32.png) [@Greenie](https://discuss.elastic.co/u/Greenie)
#### Post date: [June 29, 2017, 1:08pm UTC](https://discuss.elastic.co/t/elk-5-3-archive-and-delete-indices/91285/1 "2017-06-29T13:08:07Z")

</div>

I am running ELK stack on a single node Windows 2012 R2 server. It was working well until after deploying several winlogbeat clients (about 60 total) at once. The server seemed to be overloaded trying to process all of the logs, so I added RAM and it has been a couple of weeks now and never recovered. I can still search but it is slow and times out most times, but the server performance itself looks to be fine with 4 cores and 64GB of RAM. I read that archiving older indices onto an external drive would help, but I could not find anything through my research explaining how to do this. Any help would be greatly appreciated.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 30, 2017, 5:45am UTC](https://discuss.elastic.co/t/elk-5-3-archive-and-delete-indices/91285/2 "2017-06-30T05:45:34Z")

</div>

You can't really do what you're asking.

It'd be either you taking a snapshot of older indices and storing them on that disk, or setting up another node with that disk as it's data path.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 28, 2017, 5:45am UTC](https://discuss.elastic.co/t/elk-5-3-archive-and-delete-indices/91285/3 "2017-07-28T05:45:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
