The short answer is that you cannot accurately predict what the maxTotalDataSizeMB will be. It will vary based on event count, event size, indexed size, etc. In the use case you describe, I think it would be best to set maxTotalDataSizeMB to unlimited (or a very high value), set frozenTimePeriodInSecs to 5184000 (60 days), and remove both coldPath.maxDataSizeMB and coldToFrozenDir. That will ensure you can handle the new log volume coming in and events older than 60 days will be deleted.
... View more