Go to Solution.
Just to give the exact location of the script:
This script will roll over the old logs and it is in cronjob: /opt/jIngest/watcher/elasticsearchDiskRollover.py
Number of days to keep the logs are configured in: /opt/jIngest/watcher/elasticDiskRollover.cfg
Daily old log rollover logs can be seen in:/var/log/diskrollover.log
By default, 500GB gets assigned to Log collector node so once it reaches 80% i.e. 400G, LC starts purging old logs.
400G is configured in /opt/jIngest/watcher/elasticsearchDiskRollover.py script ( LC automatically calculate 80% of total disk space assigned so the user need not require to edit it)