The answer I gave in the other thread is also valid for your question:
FWIW, Graylog is never deleting messages from indices. It can delete complete indices, though, depending on your configured retention policy.
The answer I gave in the other thread is also valid for your question:
FWIW, Graylog is never deleting messages from indices. It can delete complete indices, though, depending on your configured retention policy.