Merge pull request #10024 from Security-Onion-Solutions/esspace

Manage disk-based index deletion via so-curator-cluster-delete

salt/elasticsearch/defaults.yaml

@@ -1,4 +1,6 @@
 elasticsearch:
+  retention:
+    retention_pct: 50
   config:
     node: {}
     cluster:

salt/elasticsearch/init.sls

@@ -407,7 +407,6 @@ so-elasticsearch-roles-load:
       - docker_container: so-elasticsearch
       - file: es_sync_scripts
 
-
 {% else %}
 
 {{sls}}_state_not_allowed:

salt/elasticsearch/soc_elasticsearch.yaml

@@ -1,7 +1,12 @@
 elasticsearch:
   esheap:
     description: Specify the memory heap size in (m)egabytes for Elasticsearch.
-    helpLink: elasticsearch.html 
+    helpLink: elasticsearch.html
+  retention: 
+    retention_pct:
+      decription: Total percentage of space used by Elasticsearch for multi node clusters
+      helpLink: elasticsearch.yaml
+      global: True
   config:
     cluster:
       name: