Archiving retention

[adivittorio]

Hi Everyone,

If I lower the index retention and tell it to use the archive, what happens to the logs with larger retention? Example. We currently have 1 year of retention. If we move to 6 months of retention + 18 of archiving, what happens to logs older than 6 months? 

[richgalloway]

When the retention period is reduced, any buckets where all data is older than the new retention period will be frozen.  When archiving is enabled, freezing buckets means moving them to archive storage.