Page 1 of 1

Reduce logstash size after removing events in it

Posted: Wed Jan 13, 2021 11:50 am
by rajusys
Hi,

We are able to remove the events from logstash and can also see the Docs number coming down but the primary size is the same.

Can you please advise how can we reclaim the space for this logstash.

Re: Reduce logstash size after removing events in it

Posted: Thu Jan 14, 2021 5:56 pm
by cdienger
Try running the optimze command after removing objects from the database:

Code: Select all

/usr/local/nagioslogserver/scripts/curator.sh optimize indices --older-than 2 --time-unit days --timestring %Y.%m.%d