We use Graylog 2.5.2 on Centos.
In the directory /var/lib/elasticsearch/nodes/0/indices every day, 2 or 3 directories appear, with sizes of
2.2 GByte.
How can we clean up this?
Please go over in the Graylog UI and select System > Indices make a retention configuration that suites your needs (and can be placed on your available disk space). Graylog will take care to housekeep the indices.
This indices are your logdata you ingest.
Your suggestion helped me to solve this problem.
Thanks.