Indexes size and time duration recommended values

Hi people, I have ELK 7.8.0 running OK and configured by default.

I have several data coming to my ELK server: mainly Cisco ASA and Netflow into filebeat-* indexes:

And this is the default lifecycle policy:

Do you think default values are OK or do I have to adjust some of them in my situation?

Thanks a lot !!!

50Gb per shard is a good practice for production

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.