Hi Mark
Our planned setup works like this.
America DC:
(1) Client Nodes
(2) Logstash Node (the logs generated by all clients in this DC is processed by this logstash node)
Europe DC:
(1) Client Nodes
(2) Logstash Nodes (the logs generated by all clients in this DC is processed by this logstash node)
(3) Elastic Search Server
(4) Elastic Search Database
(5) Kibana
The data collected by logstash in America DC will be transferred to the Elastic Search Server in Europe DC.
Also, the elastic search volume is expected to expand rapidly this year,
Do you foresee any problems with this architecture that would affect elastic search performance or is it sustainable ?
Regards
Senthil Nathan M