Thanks. I didnt set sincedb_clean_after in my config. let me check on that.
I wanted to check on the volume where we have 900,000 (900K logs) for 24 hr period spread out in 12 servers where logstash installed in all 12. logstash should be able to handle this volume right.