Exceeding the maximum number of indices

Graylog Central (peer support)
1

Hello,
I have created an index set with these parameters:

  • Index retention strategy: Index Size
  • Max index Size: 1073741824 bytes (1.0GB)
  • Index retention strategy: Delete
  • Max number of indices: 20

Now, I see that the number of indices is 523 and occupies 474GB.
Can you tell me if it is normal that the max number of indices (20) is exceeded?

thank you very much for your help.

Christophe

2

Hello @delcoc, welcome!

What do you see in your system messages? Do you see that the indices are attempting to rotate but unable for some reason? Are there any errors in your server.log?