Advice to process events in elasticsearch

500Gb Harddisk
16GB RAM