Hello, Could you please tell us how many indices called "graylog_<number>" you have in your elasticsearch cluster? Graylog2 will not start deleting old indices until the value set on "elasticsearch_max_number_of_indices" is reached, so you could use a lower value for that setting in order to use less disk space.
Regards, Edmundo Alvarez Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH Steckelhörn 11 20457 Hamburg Germany https://www.torch.sh/ Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) On 21 Jul 2014, at 10:29, Kaustubh Padegaonkar <thetuxra...@gmail.com> wrote: > Hello, > > In my graylog conf file, I have set the retention_strategy to delete. > elasticsearch_max_number_of_indices is set to 60. > > elasticsearch_index_prefix is graylog and I can see that the indices are > named as graylog_<number> > > I restarted elasticsearch and graylog a few times, but the indices dont seem > to be deleted by graylog. The logs also dont show any goings on. > > What gives? I am running out of disk space. I can use the ES_head plugin and > delete the old ones one-by-one, but I need to know why this is happening. > > Thank you. > > -- > You received this message because you are subscribed to the Google Groups > "graylog2" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to graylog2+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
