reduce elasticsearch log retention
warning about things to avoid