We are using Splunk Insights for Infrastructure and its using 10gb or more a day and consuming a ton of space. I read of threads about collectd, but not sure how we are collecting the data. I expect we are using the default method to collect and store the data. Any insights are appreciated.
Where is it consuming this space? In an index? Kvstore? Lookups? Logs?