# How to manage multitenant ELK Cluster

**URL:** <https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606>\
**Category:** Elasticsearch\
**Created:** [February 26, 2021, 11:42am UTC](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606 "2021-02-26T11:42:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![verdienansein](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/verdienansein/32/84609_2.png) [@verdienansein](https://discuss.elastic.co/u/verdienansein)\
**Post date:** [February 26, 2021, 11:42am UTC](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606/1 "2021-02-26T11:42:49Z")

</div>

Hi,  
in our project we are using a multitenant cluster where several applications are logging to it with weekly log indices.  
We are facing now a problem because some of these applications are creating very big indices of logs saturating our disk space. We cannot increase our disk storage because it is a fixed size.  
Is there any possibility to create "quotas" in order to limit in some way the quantity of logs each application can create? There is any solution or alternative that Elasticsearch can provide in this kind of situation?  
Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 27, 2021, 12:18am UTC](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606/2 "2021-02-27T00:18:52Z")

</div>

Welcome to our community! 😃

> [@verdienansein](#):
>
> Is there any possibility to create "quotas" in order to limit in some way the quantity of logs each application can create?

Not natively, no.

> [@verdienansein](#):
>
> There is any solution or alternative that Elasticsearch can provide in this kind of situation?

You can look to split indices by user, then use [ILM][ILM: Manage the index lifecycle | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/index-lifecycle-management.html)) to manage retention.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 27, 2021, 12:19am UTC](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606/3 "2021-03-27T00:19:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.