I'm using elasticsearch in conjunction with Graylog.
Is there a way to limit the size of the elasticsearch database, possibly using a round-robin database approach for the logs? My setup is relatively small (~100GiB database), and I'm aware that elasticsearch needs a lot of space to store all the database indices, but I need to limit its size, no matter if data needs to be deleted.
What's the best practice approach here? How do you limit the amount of stored and indexed logs in your setup?