On the ELK mount, we are seeing high diskspace utilization. We have docker image of elasticsearch 7.14 and indices is consuming 2.8T of space. Can we do housekeeping on this or update the ELK policy?. Or how to reduce this disk space utilization.
Any pointers would be greatly appreciated.
Below are the details
Cluster Node ELK
Hot Phase ( Rollover Maximum Primary 50 GB, Max age 1, index priority 1)
Warm phase : 8 days (Replicas Number of replicas 1, Data allocation : Use warm nodes),
cold Phase :30 days,
Delete Phase : 60 days