Index Design • Room 2

Index Design & Retention

Indexes are the fundamental storage unit. Each index has its own retention policy (`frozenTimePeriodInSecs`), max size (`maxTotalDataSizeMB`), and bucket lifecycle.

Separating data by retention requirement (e.g., security logs = 1 year, web logs = 90 days) into different indexes prevents unnecessarily storing cheap data as long as expensive data.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

Drag items to their correct zone (or tap item then tap zone on mobile)

Newly ingested, actively written data

Rolled from hot, still on fast storage

Older data moved to cheaper/slower storage

Data past retention, archived or deleted

Hot Bucket

Warm Bucket

Cold Bucket

Frozen Bucket