We have downloaded ELK and unzipped them under c:\Softwares in windows machine. We have started the Elasticsearch, Kibana and Logstash with respective .bat files in bin directory.
Filebeat is installed in our SIT server and it is posting the logs to logstash as expected. Last week our dev machine harddisk became full (This is where we have installed ELK). We got this issue after 3 weeks from when we installed ELK on this machine.
So I was trying to clear the logs of Elasticsearch so that we can free up some space. But I could not find any specific storage location of Elasticsearch.
After searching the installed folders I have noticed c:\Softwares\elasticsearch-5.5.0\data folder. But I am not sure if this is where ELK stores the data. I have been reading other posted queries in this site but could not find the answer.
Our queries are,
- Where is Elasticsearch data stored in windows machine for our case
- How to delete the data after certain days. We would like to retain only two weeks data during SIT phase. Once we move on to production, we may retain 2 months logs.
Any help would appreciated.