We would like to reduce the number of shards our cluster has. We already changed our retention/rotation policy but the number is still too high.
We found the rollover index feature from Elasticsearch (https://www.elastic.co/guide/en/elasticsearch/reference/6.8/indices-rollover-index.html), and we would like to know if we could use it with Graylog and if you have knowledge about the two things working together. We are afraid that the alias used by Elasticsearch won’t work with Graylog.
Thanks for your help