Cost effective method for configuring, storing and analyzing logs

Elastic Stack Elasticsearch
1

Hi

if i've 10 different servers, and i want to analyze the iis logs from each server, which is the cost effective method?
sending the iis logs from 10 different servers to single index in elasticsearch or for each server creating a new index?

thanks
Annu

2

I'd probably use one single index per day for that and add of course the server name or id in the JSON document to be able to filter and aggregate per server.

3

Hi @dadoonet

thanks for your quick response.

Annu

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.