Why elasticsearch index log size larger than the actual size on the server?

If you look picture no.1 my server have 64G and used 39G. Container elasticsearch and logstash use like 2.2G, docker image 3.4G = 5.6 G. Then the volume use like 30.7 G.

Meanwhile, if i check my index size at index management, picture no.2 . Size of the index not more than < 20G, if I quick calculate. What make it so large almost two size of the original size? cause by json original document that I need to disable? or there's a cache?

ps : Im not running anything except linux os, elasticsearch and logstash container.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.