# Best Practice Implementaion

**URL:** <https://discuss.elastic.co/t/best-practice-implementaion/76569>\
**Category:** Elasticsearch\
**Created:** [February 27, 2017, 3:54am UTC](https://discuss.elastic.co/t/best-practice-implementaion/76569 "2017-02-27T03:54:43Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mhalatuituia](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\
**Post date:** [February 27, 2017, 3:54am UTC](https://discuss.elastic.co/t/best-practice-implementaion/76569/1 "2017-02-27T03:54:43Z")

</div>

Hi  
I want to know the best implementaion regarding an environment where you want to separate each system analysis. For instance if i want to analyse DNS, Web, Email, lets say i am a Service Provider where i want to provide details. Should i install separate ELK stack for each service like a cluster or i can centralise everything on one server. i hope my case is clear and your kind response is very much appreciated.  
Tanks and Regards  
Maile.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 27, 2017, 3:58am UTC](https://discuss.elastic.co/t/best-practice-implementaion/76569/2 "2017-02-27T03:58:08Z")

</div>

A single cluster, with access control like what X-Pack provides, would cover this sort of use case easily.

---

<div class="post-metadata">

**Author:** ![mhalatuituia](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\
**Post date:** [March 2, 2017, 4:03am UTC](https://discuss.elastic.co/t/best-practice-implementaion/76569/3 "2017-03-02T04:03:09Z")

</div>

any detail info for the setup or links

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 2, 2017, 4:07am UTC](https://discuss.elastic.co/t/best-practice-implementaion/76569/4 "2017-03-02T04:07:00Z")

</div>

[https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html](https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 30, 2017, 4:07am UTC](https://discuss.elastic.co/t/best-practice-implementaion/76569/5 "2017-03-30T04:07:04Z")

</div>

Closed on March 30, 2017, 4:07am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.