According to http://docs.graylog.org/en/1.3/pages/index_model.html, graylog2 deletes old indicies based on the "elasticsearch_max_number_of_indices".
Why can't graylog2 allow no. of indicies to grow?
Also, according to the same page above,
You have configured the maximum number of indices in your graylog.conf (elasticsearch_max_number_of_indices). When that number is reached the oldest indices will automatically be deleted. The deleting is performed by the graylog-server master node in a background process that is continuously comparing the actual number of indices with the configured maximum
graylog-server deletes the indicies continuously so if I were to restore and old index when we're already at the max elasticsearch_max_number_of_indices
, will this push out one of the existing one?