Hi,
I have an index(es) that are beginning to rapidly fill up my filesystems on a cluster. What is the quickest way to determine who the culprits are?
You can use firebrigade or dbinspect
to see what indexes take up how much space in which buckets, and what your compression ratio is. You can use SoS or the new Distributed Management Console or the Licensing views to see what hosts, sourcetypes, etc. make up the most incoming data. Additionally, take cluster search and replication factors into account.