Hi,
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
I’m on a 2.15 Opensearch and Opensearch Dashboards version on a single-node configuration.
Describe the issue:
I’m trying to use the security analytics module to create detectors but I see there is a lot of new indexes like “-detectors-queries-” with only one document.
I assume it’s the result of a query but the problem is there is now too much indexes so too much shards used.
Do you know who to change the retention periode of queries?
Best regards,