Retention change

Hi @all,

We have 390 days of retention policy for the past 2 years. However, the storage is now exceeding the limits so we need to cut short the retention policy to 60 days.

What all changes can we expect on the graylog systems. What will happen to the logs that are already stored that is that are there in elastic for more than 60 days? Will those logs be instantly deleted?

Thanks & Regards,


This depend on how you configured the Index retention strategy

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.