ELK stack components installation recommendations


(Chandana Reddy) #1

Installation of ELK stack components on single node is recommended or what is the best way to install ELK components (single/multiple nodes) ?


(Mark Walkom) #2

Depends on your needs; what volume of events, what is your retention period, what sort of querying will you do, do you want HA?


(Chandana Reddy) #3

Gigabytes of log data will be pushed to logstash server everyday,i don't want the indexes to be deleted after certain period,instead i will be archiving the indexes and the environment should be HA.


(Magnus B├Ąck) #4

Gigabytes of log data will be pushed to logstash server everyday,

That's pretty vague, but it sounds like you'll need a few machines with tens of gigabytes of RAM.

i don't want the indexes to be deleted after certain period,instead i will be archiving the indexes

What do you mean by archiving? That's not really an Elasticsearch concept.

and the environment should be HA.

Okay, so at least three nodes then and you'll probably want a load balancer in front of the machines.


(system) #5