First, let's clarify some terms. Indexes are composed of buckets. Buckets holds events and can be at one of 4 tiers: hot, warm, cold, or frozen. The bucket rolls from one tier to another once certain size or time constraints are reached.
It's perfectly normal for an index to be huge, but please give us your definition of "huge". A sudden burst of data can cause individual hot buckets to get very large before they roll to warm. It all depends on the settings for the index. Can you share them?
---
If this reply helps you, Karma would be appreciated.
