# Elastic + Kibana Server Specs Recommendation

**URL:** https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263
**Category:** Elasticsearch
**Created:** [August 13, 2014, 3:38pm UTC](https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263 "2014-08-13T15:38:10Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![AK1](https://avatars.discourse-cdn.com/v4/letter/a/7c8e57/32.png) [@AK1](https://discuss.elastic.co/u/AK1)
#### Post date: [August 13, 2014, 3:38pm UTC](https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263/1 "2014-08-13T15:38:10Z")

</div>

Hi,

I recently launched ELK and I'm receiving about 3,000,000 - 8,000,000 docs  
per day (~ 5GB)  
I'm running on AWS on a small server, and after a week of data collection  
the system becomes very very slow, mainly when I am looking for data older  
than 2 days.  
Do you have a recommendation for servers in points such as cpu, memory and  
iops and elstic settings like shards.

Thanks  
AK

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/349f33f6-aad8-4089-a482-22eaf4dd4cb4%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/349f33f6-aad8-4089-a482-22eaf4dd4cb4%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Jay\_Swan](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@Jay\_Swan](https://discuss.elastic.co/u/Jay_Swan)
#### Post date: [August 13, 2014, 4:47pm UTC](https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263/2 "2014-08-13T16:47:14Z")

</div>

For Elasticsearch, try m3.xlarge and set ES\_HEAP\_SIZE to 7 or 8GB. You may  
also want to have more than one node in your cluster.

You might also want to split Logstash off onto a separate instance. It is  
CPU intensive but not particularly RAM intensive. Set the -w {n} flag in  
the startup script to allow Logstash to run multiple threads across  
multiple cores. You might start with a m3.large for this and use -w 2 and  
see how it goes.

On Wednesday, August 13, 2014 9:38:10 AM UTC-6, AK wrote:

> Hi,
> 
> I recently launched ELK and I'm receiving about 3,000,000 - 8,000,000 docs  
> per day (~ 5GB)  
> I'm running on AWS on a small server, and after a week of data collection  
> the system becomes very very slow, mainly when I am looking for data older  
> than 2 days.  
> Do you have a recommendation for servers in points such as cpu, memory and  
> iops and elstic settings like shards.
> 
> Thanks  
> AK

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/90398be0-4804-44d7-9f8e-e033daa7050b%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/90398be0-4804-44d7-9f8e-e033daa7050b%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![otisg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/otisg/32/492_2.png) [@otisg](https://discuss.elastic.co/u/otisg)
#### Post date: [August 17, 2014, 11:49am UTC](https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263/3 "2014-08-17T11:49:52Z")

</div>

Hi AK,

It's a little hard to make a recommendation like this because it really  
depends on how you've structured your logical and physical index, how much  
historical data you want to keep and query, what sort of queries you run,  
how fast you need things to be, etc.

Something like SPM for Elasticsearch ([Sematext Monitoring | Infrastructure Monitoring Service](http://sematext.com/spm/) ) can tell  
you about where your bottleneck is - maybe it's CPU, maybe it's RAM, maybe  
it's IO, or something else. Based on that info you will see which  
instances you should get, how many you'll need, etc.

## Otis

Elasticsearch Performance Monitoring \* Log Analytics \* Search Analytics  
Solr & Elasticsearch Support \* [http://sematext.com/](http://sematext.com/)

On Wednesday, August 13, 2014 5:38:10 PM UTC+2, AK wrote:

> Hi,
> 
> I recently launched ELK and I'm receiving about 3,000,000 - 8,000,000 docs  
> per day (~ 5GB)  
> I'm running on AWS on a small server, and after a week of data collection  
> the system becomes very very slow, mainly when I am looking for data older  
> than 2 days.  
> Do you have a recommendation for servers in points such as cpu, memory and  
> iops and elstic settings like shards.
> 
> Thanks  
> AK

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/c984032b-3a9c-453d-94d5-1ecda9b718c9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c984032b-3a9c-453d-94d5-1ecda9b718c9%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:08am UTC](https://discuss.elastic.co/t/elastic-kibana-server-specs-recommendation/19263/4 "2017-07-06T01:08:08Z")

</div>


