Hdd grow every day

[TheFoxunited (Gauthier Colmant)]

Hello all ,

My graylog instance are on esxi vmware
The option : “Static provisioning immediately zeroed” is activate
the hard drive keeps growing

My graylog (debian 9.8) has 250 GO please ( but now 450 GO ) ( i have only 40 GO of logs )
Can someone help me ?

[shoothub]

You probably have created snapshot, and you still run it. Remove all snapshots from graylog VM to release space.

[gcolmant (Colmant)]

I create a new graylog yesterday . And still growing .
Screenshot :

I don’t create any snapshot …

Thanks !

[jan (Jan Doberstein)]

I guess you have elasticsearch running on the same host? I guess you ingest messages to graylog?

Did you configure any retention and rotation settings in System > Indices?

Jan