# Elastic+Kibana SizingHe

**URL:** <https://discuss.elastic.co/t/elastic-kibana-sizinghe/146742>\
**Category:** Elasticsearch\
**Created:** [August 30, 2018, 4:14pm UTC](https://discuss.elastic.co/t/elastic-kibana-sizinghe/146742 "2018-08-30T16:14:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bigdatapower](https://avatars.discourse-cdn.com/v4/letter/b/da6949/32.png) [@bigdatapower](https://discuss.elastic.co/u/bigdatapower)\
**Post date:** [August 30, 2018, 4:14pm UTC](https://discuss.elastic.co/t/elastic-kibana-sizinghe/146742/1 "2018-08-30T16:14:41Z")

</div>

Hello. Could anyone please help me to deside how to scale elastic to a multi-server cluster.  
Current situation:  
1 linux machine 2 cores/8GB RAM  
1 elastic instance + 1 kibana instance  
40 data indexes every month, 1 shard/0 replicas for each  
Number of new indexes/month grows slowly, consider 5 indexes per year  
Average size of index 3.2 gb with total monthly data of 125 GB with 25GB growth per year  
210 Million events per month with average event size of 610bytes

What we do is mainly just index all those events while doing some non-aggregating queries from kibana each 5 second (for example we often do "_catch_ OR _failure_ OR _error_ OR _rollback_ OR _warning_" query).  
At current event rate we have a problem with query execution time - it now sometimes exceedes 5 seconds or even more, so we decided to consider scaling horizontally.  
I've read a lot of articles about elastic sizing, all of them only claim that "It depends" which is not useful at all.  
I also need some architectual insight here, as I can not quite decide how much nodes do we need. For instance, we could have 3 nodes, 2 of which can be master+data nodes, and one will host kibana and serve as master+non-data node. Is there any sence in such configuration?

So overall question is what is the best architecture decision in this situation and what could be advised for sizing for that arch.

Thanks to anyone who responds.  
Dmitry

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 27, 2018, 4:14pm UTC](https://discuss.elastic.co/t/elastic-kibana-sizinghe/146742/2 "2018-09-27T16:14:41Z")

</div>

Closed on September 27, 2018, 4:14pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
