# EFK stack performance with large data

**URL:** <https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101>\
**Category:** Kibana\
**Created:** [June 24, 2022, 10:56am UTC](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101 "2022-06-24T10:56:32Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mohit.Sharma](https://avatars.discourse-cdn.com/v4/letter/m/76d3ee/32.png) [@Mohit.Sharma](https://discuss.elastic.co/u/Mohit.Sharma)\
**Post date:** [June 24, 2022, 10:56am UTC](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101/1 "2022-06-24T10:56:32Z")

</div>

Hello Team,

We are planning to store logs in ElasticSearch DB through Filebeat and then create dashboards on Kibana for graphical visualization(Lens, TSVB, Aggregations) using basic license. As we are expecting around 25 million transactions per day so would there be any performance issues that we can expect? If yes, then how we can overcome those?

Thanks,

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 24, 2022, 12:23pm UTC](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101/2 "2022-06-24T12:23:01Z")

</div>

It really depends on the size of your data and the specs of your cluster, but 25 million events per day is not that much.

---

<div class="post-metadata">

**Author:** ![Mohit.Sharma](https://avatars.discourse-cdn.com/v4/letter/m/76d3ee/32.png) [@Mohit.Sharma](https://discuss.elastic.co/u/Mohit.Sharma)\
**Post date:** [June 24, 2022, 1:02pm UTC](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101/3 "2022-06-24T13:02:49Z")

</div>

@leandrojmp thanks for the response.

So allocating enough memory to the box will not impact the performance? I am more concerned about the Kibana graphs response time.

If i have created a graph e.g TSVB with multiple aggregations and it need to show result by querying over 100 million transactions then how fast/slow would be the response time?

Thanks.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 24, 2022, 3:06pm UTC](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101/4 "2022-06-24T15:06:10Z")

</div>

Kibana is the visualization and administration tool, the majority of response time depends on how fast your elasticsearch cluster can answer to Kibana requests.

This is something that you can't know without doing some tests as this depends on how your data looks like, what will be aggregations you need, if you mapped your index correctly and some other factors.

You need to start indexing your data and make some tests to know.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 22, 2022, 3:06pm UTC](https://discuss.elastic.co/t/efk-stack-performance-with-large-data/308101/5 "2022-07-22T15:06:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.