Your fronzenTimePeriodInSecs is 100 days... 86400 (secs/day) * 100 = 8640000 Try this for 30 days retention: Add 1 sec to avoid ohSnap [indexName] maxHotSpanSecs = 86401 #not 86400 to avoid ohSnap maxHotIdleSecs = 86401 frozenTimePeriodInSecs = 2592000 ... This will make sure the hot buckets close at the end of a day instead of waiting for the hot buckets to fill before they roll. The net effect is buckets from 31 days ago are rolled to frozen. ... View more

The cluster may not recognize the old references, so it has to be manually removed. ... View more