# Elasticsearch, Logstash, Kibana Scale-out Architecture

**URL:** <https://discuss.elastic.co/t/elasticsearch-logstash-kibana-scale-out-architecture/325206>\
**Category:** Elasticsearch\
**Created:** [February 10, 2023, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-kibana-scale-out-architecture/325206 "2023-02-10T00:34:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![haikal.azaim](https://avatars.discourse-cdn.com/v4/letter/h/73ab20/32.png) [@haikal.azaim](https://discuss.elastic.co/u/haikal.azaim)\
**Post date:** [February 10, 2023, 12:34am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-kibana-scale-out-architecture/325206/1 "2023-02-10T00:34:06Z")

</div>

Hi Elastic Community, please need your advice.

I have 2 logstash, 3 elasticsearch nodes, and 1 kibana for one office. I want to scale out the architecture, because there is new office with 300GB/day. My goal is to stick with 1 kibana (make use of kibana space) and add 2 more logstash in that new office. Is there any suggestion and consideration regarding the architecture whether i have to setup new elasticsearch cluster or just have to add more storage to existing elasticsearch cluster?

Thanks

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [February 10, 2023, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-kibana-scale-out-architecture/325206/2 "2023-02-10T07:04:54Z")

</div>

I had a similar configuration 3 nodes, 1 Kib, 1 LS, 1 FB, and around 300-400 GB daily.  
The most important thing related to the storage is ILM. Monitor your data to track a potential increase.  
If you didn't enable Stack monitoring, would be nice to enable, at least at begging 1-2 months.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 10, 2023, 7:05am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-kibana-scale-out-architecture/325206/3 "2023-03-10T07:05:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.