# Cost effective method for configuring, storing and analyzing logs

**URL:** <https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804>\
**Category:** Elasticsearch\
**Created:** [November 8, 2017, 5:57am UTC](https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804 "2017-11-08T05:57:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![annu](https://avatars.discourse-cdn.com/v4/letter/a/5f8ce5/32.png) [@annu](https://discuss.elastic.co/u/annu)\
**Post date:** [November 8, 2017, 5:57am UTC](https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804/1 "2017-11-08T05:57:26Z")

</div>

Hi

if i've 10 different servers, and i want to analyze the iis logs from each server, which is the cost effective method?  
sending the iis logs from 10 different servers to single index in elasticsearch or for each server creating a new index?

thanks  
Annu

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 8, 2017, 8:41am UTC](https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804/2 "2017-11-08T08:41:31Z")

</div>

I'd probably use one single index per day for that and add of course the server name or id in the JSON document to be able to filter and aggregate per server.

---

<div class="post-metadata">

**Author:** ![annu](https://avatars.discourse-cdn.com/v4/letter/a/5f8ce5/32.png) [@annu](https://discuss.elastic.co/u/annu)\
**Post date:** [November 9, 2017, 6:25am UTC](https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804/3 "2017-11-09T06:25:48Z")

</div>

Hi @dadoonet

thanks for your quick response.

Annu

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 7, 2017, 6:26am UTC](https://discuss.elastic.co/t/cost-effective-method-for-configuring-storing-and-analyzing-logs/106804/4 "2017-12-07T06:26:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.