Reduce logstash size after removing events in it

[rajusys]

Hi,

We are able to remove the events from logstash and can also see the Docs number coming down but the primary size is the same.

Can you please advise how can we reclaim the space for this logstash.

[cdienger]

Try running the optimze command after removing objects from the database:

Code: Select all

/usr/local/nagioslogserver/scripts/curator.sh optimize indices --older-than 2 --time-unit days --timestring %Y.%m.%d