I have my indexes mostly in time-aligned shards, so each 24 hour period results in a new shard.
I am interested to know if I can measure the relative search hits per shard across each index.
The reason for doing this, is so I can identify inefficient retention configuration in certain indexes.
i.e. If I only see hits for the most recent 7-day rolling window, I can reduce my data retention settings to something closer to 7 days.
Note: I also have the data pushed to long term storage, so data loss isn't a concern.
Is there a standard way of achieving this?
Thanks.