# Elastic stack 10k EPS
**URL:** https://discuss.elastic.co/t/elastic-stack-10k-eps/378903
**Category:** Elasticsearch
**Created:** [June 5, 2025, 10:31am UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903 "2025-06-05T10:31:05Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@adilraad2001](https://discuss.elastic.co/u/adilraad2001)
#### Post date: [June 5, 2025, 10:31am UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/1 "2025-06-05T10:31:05Z")
Hello guys i want to build my SIEM to handle at least 10000EPS what configuration should i do and what requirement need to use with what number of nodes and info i need
---
### Author:  [@adilraad2001](https://discuss.elastic.co/u/adilraad2001)
#### Post date: [June 7, 2025, 2:51pm UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/2 "2025-06-07T14:51:00Z")
Any one knew how i can do it
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [June 7, 2025, 3:58pm UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/3 "2025-06-07T15:58:02Z")
There is no quick answer to this, you need to do some tests on a proof of concept environment.
The number of nodes depends on a lot of other factos, like how many data you have per day, for how long you want to keep this data, if you are going to have snapshtos or not etc.
Try to spin up a small cluster with 3 nodes where all 3 are master eligible and data nodes, this will make it easier to estimate the resources you will need in production once you have your ingestion working.
I would say that one important requirement is to use fast disks, ssd or nvme disks for example.
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [June 7, 2025, 4:13pm UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/4 "2025-06-07T16:13:34Z")
^^^^^ Exactly This.
@adilraad2001
If you want to see what the HW profiles we run in Elastic Cloud see here.
These are a good place to start with specs
> **[Hardware | Elastic Documentation](https://www.elastic.co/docs/reference/cloud/cloud-hosted/hardware)**
>
> Use this information to better understand how Elasticsearch Service instance configurations (for example azure.es.datahot.ddv4, gcp.es.datahot.n2.68x10x45,...
---
### Author:  [@adilraad2001](https://discuss.elastic.co/u/adilraad2001)
#### Post date: [June 7, 2025, 6:17pm UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/5 "2025-06-07T18:17:41Z")
This a good answer
Is there any way to simulate the trafic of more than 8k EPS to take a look of stability of it
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [June 7, 2025, 9:01pm UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/6 "2025-06-07T21:01:53Z")
There's lots of logs generator simulators out there...
Or just go to chat gpt and ask it to write it for you in Python. It'll get 90% there the first time
And of course there's our formal rally benchmark tool if you want to use that. That takes a little bit of work and understanding
> **[GitHub - elastic/rally: Macrobenchmarking framework for Elasticsearch](https://github.com/elastic/rally)**
>
> Macrobenchmarking framework for Elasticsearch
Oh and just to set your mind at ease 10K EPS ingest on a well set up 3 now de cluster should not be a problem... Then it comes down to how long you want to keep the data and how you are going to search / use it.
---
### Author:  [@adilraad2001](https://discuss.elastic.co/u/adilraad2001)
#### Post date: [June 7, 2025, 9:14pm UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/7 "2025-06-07T21:14:33Z")
Can u give me some documentation can help me in this
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [June 7, 2025, 11:09pm UTC](https://discuss.elastic.co/t/elastic-stack-10k-eps/378903/8 "2025-06-07T23:09:49Z")
> **[Rally 2.12.0 documentation](https://esrally.readthedocs.io/en/stable/)**
The quick start take just a couple commands
To set target throughput us `target-throughput` configuration