I have a daily index created by logstash and pushed to elasticsearch.
From this daily index I've created a new index using a roll-up job.
The issue I have is that this newly created index is getting bigger and bigger and I need to keep it as long as I can.
In order to achieve this I want to rollover this new index using ILM policy.
It is possible to rollover (by size) an index created by a roll-up job using ILM?