I have a single node elasticsearch cluster that may be having slow indexing performance (we have logstash's batch size about 2000 and workers at 40 pushing data to elasticsearch single node), so we were thinking to add an additional node to the cluster. However the configuration given to us is 3 nodes with one 4GB and two 8GB RAM servers . would this be enough to improve performance ?
The current single node server has about 32GB RAM and does adding nodes with lower RAM affect how elasticsearch performs ?
the replica is already set to zero, and the refresh interval is set at the default 1s. The VMs will be provisioned soon, i'll test it out and see if it works in our use case . Ours is not a data-stream, but will be an on-demand setup scenario where,
User will chose an IP and a predefined set of logs will be fetched and parsed by logstash -> indexed in elasticsearch and populated in kibana dashboards
Try to increase it to 30s for example, using refresh interval of 1s with an HDD disk can really impact the performance, increasing it can help a little.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.