I have ELK stack with one node (master). I will pipe logs from about 10 servers, about 500.000 logs in 12 hours.
VPS (6 CPU)
Heap size: 8GB
I have problem when I try to search some query in Kibana.
e.g. I first choose Absolutly date, about 2 days. I see about 1.500.000 hits (logs).
Match filter only one input type. I see about 700 hits (logs)
When I input query one word, e.g backup or "backup complete" or something else, Kibana goes to unresponsive mode. I must to Kill browser.
Disk I/O is small, CPU utilization small, Memory free 12GB.
Please help me. Thank you.