I have a question regarding filebeat index. The scenarios is:
I am transferring Nginx access and error logs from filebeat to my Elasticsearch server. Is the size of filbeat index is equal to the size of access and error log?
No it won't be.
Elasticsearch creates a number of different data structures to make querying faster, so it may add size. But then it also compresses the data.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.