I have currently running ELK stack on aws cloud. Currently I am facing performance issue with same and highwater mark.
I want to redeploy cluster , currently we have daily 400 GB data generated and we have to keep near to 30 days of data on Elasticsearch.
Please suggest how many master and data nodes and shards and replica I should consider? As I am new to ELk, watching watches help me understand basics but for production how should I proceed and gather information, to deploy cluster from scratch.