Clear logs??

[ColeVan]

Silly question... My disk space is filling up and I need to clear my logs. How do I go about this?

[greatapoc]

so-elastic-clear will remove everything.

[angcar]

Hi,
And this does not affect the shards of elasticsearch?

Thanks.

[ColeVan]

so-elastic-clear does not seem to work. I have tried it multiple times. I even rebooted it twice. Logs are still there. Is there a config that can be modified to clear logs over a certain age? For example, logs over 30 days will be deleted. any idea why so-elastic-clear isn't working?
I am running a distributed-environment using Version 2.3.1
Thanks!

[kunwon1]

From that screenshot, it looks like you didn't type AGREE and press enter - I did this yesterday and it worked

[ColeVan]

Well..... I feel stupid lol. Thanks. It worked

[TOoSmOotH]

Are you collecting PCAP?

[ColeVan]

Yes

[TOoSmOotH]

Then that is what is filling up your disk. You can disable it if you have space issues.