This is a kind of tricky question. We would like to control traffic and indices size amount, so wonder what are the options here and there to ensure traffic for logs hasn't reached e.g. 10Gb/per or index size hasn't reached e.g. 10Gb/day
I think ILM (Index Lifycycle Management) is the keyword here: -> ILM