I don’t know to be honest. If you count every 0,1GB Logging in scale might be the wrong topic. 
It could be Logs from the Elastic being rotated and deleted, but it is unlikely as you are rotating only once a month. It could be system-logs being rotated by you linux. It could be some cache for updates which was freed. To many possibilities
1 Like