Which version of Elasticsearch are you using? What is the specification of the hosts used at the different tiers? What is the average document size? How many indices and shards are you actively indexing into? How many clients do you have indexing into the cluster?