How to control DDAS license

[prashanthan1987]

I am seeking recommendations on how to better control DDAS license consumption by identifying log patterns that are unnecessary and eliminating them before they reach the indexing layer, or alternatively moving older/low‑value data to archival storage so that it does not count toward DDAS usage.

We have already begun exploring several approaches—including leveraging summary indexes, routing selected logs directly to S3, and filtering out unwanted data at the ingestion layer. However, we are looking for a more effective strategy that allows us to reduce DDAS usage while still retaining the original log structure and maximum field availability where required.

[PickleRick]

Moving old data won't change anything. Your license is counted on ingest, at the moment the data is written to the index, to be precise.

And it's up to you to know which data you need and which you don't you can't eat the cake and have the cake at the same time.