# Why elasticsearch index log size larger than the actual size on the server?

**URL:** <https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636>\
**Category:** Elasticsearch\
**Created:** [January 20, 2021, 11:29am UTC](https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636 "2021-01-20T11:29:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![xax](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xax/32/82608_2.png) [@xax](https://discuss.elastic.co/u/xax)\
**Post date:** [January 20, 2021, 11:29am UTC](https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636/1 "2021-01-20T11:29:18Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/f/2/f22405b5b75ae2ba38ea91d3e87d226aa976b401.jpeg)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/a/6af26b26fbb473d535b1a9774151529023f97330.png)

If you look picture no.1 my server have 64G and used 39G. Container elasticsearch and logstash use like 2.2G, docker image 3.4G = 5.6 G. Then the volume use like 30.7 G.

Meanwhile, if i check my index size at index management, picture no.2 . Size of the index not more than \< 20G, if I quick calculate. What make it so large almost two size of the original size? cause by json original document that I need to disable? or there's a cache?

ps : Im not running anything except linux os, elasticsearch and logstash container.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 17, 2021, 11:29am UTC](https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636/2 "2021-02-17T11:29:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
