We have an issue that our smartevents server only has some last days of reporting available. After some researching I found these old indexed files which consume almost 500GB of data.
How should we clean this up without breaking Smartevents?
find / -type f -size +10000 -exec ls -lh {} \; 2> /dev/null | awk '{ print $NF ": " $5 }' | sort -nk 2,2 | grep 2022
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-03-02T00-00-00/data/index/_mxh_Lucene50_0.doc: 826M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-24T00-00-00/data/index/_awx_Lucene50_0.doc: 829M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-03-01T12-00-00/data/index/_fi7_Lucene50_0.doc: 831M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-25T12-00-00/data/index/_n39_Lucene50_0.pos: 837M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-25T00-00-00/data/index/_uh5_Lucene50_0.doc: 842M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-26T00-00-00/data/index/_mcn_Lucene50_0.doc: 842M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-20T12-00-00/data/index/_qi3_Lucene50_0.doc: 843M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-25T00-00-00/data/index/_mih_Lucene50_0.doc: 843M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-28T12-00-00/data/index/_eav_Lucene50_0.pos: 852M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-03-02T12-00-00/data/index/_n08_Lucene50_0.pos: 872M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-02-27T12-00-00/data/index/_b30_Lucene50_0.pos: 873M
/var/log/opt/CPrt-R81/log_indexes/smartevent_2022-03-01T12-00-00/data/index/_v7v_Lucene50_0.pos: 876M