Did some more digging into the diskspace issue. Syslog was many gigabytes because Elasticsearch went into read-only mode because of the disk space issue. The irony. Syslog now gets truncated to 0 once a month.
I also just cleared 40,000 cached preview cards and I'll automate that from now on.