All the indexes on my cluster have been deleted for two days in a row, and a suspiciously "please_read" index as found, although it had no data on it.
The cluster is protected from public internet access, and we don't exactly how to prevent this situation.
Any pointers?