# Guidance for Production ELK stack box size and other memory components discuss

**URL:** <https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357>\
**Category:** Elasticsearch\
**Created:** [September 20, 2019, 6:51am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357 "2019-09-20T06:51:22Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![elk.beginners](https://avatars.discourse-cdn.com/v4/letter/e/ec9cab/32.png) [@elk.beginners](https://discuss.elastic.co/u/elk.beginners)\
**Post date:** [September 20, 2019, 6:51am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/1 "2019-09-20T06:51:23Z")

</div>

Hello All,

```
Can anyone share the information about production configuration Box for ELK stack.

```

Actually my aim to design centralised ELK Server with (Elastic+Logstash+Kibana installation) with sufficient memory configuration and resources. Moreover, I will have to connect MySQL database servers. and I want send below data from MySQL servers to ELK stack.

**Plan to configure like below :**

1. There will be couple of MySQL server with 4 its instances each mean total 8 MySQL send their error logs and slow logs ----\> Logstash ---\> ES---\> Kibana

2. Have 50+ JDBC input(with respective of 10 instances of MySQL with simple select queries) from Logstash ------\> ES and display stats with Kibana  
**eg:**

input {  
jdbc {  
jdbc\_driver\_library  
query-3 from mysql  
}  
jdbc {  
jdbc\_driver\_library  
query-1 from mysql  
}  
jdbc {  
jdbc\_driver\_library  
query-2 from mysql  
}  
.......50+  
}  
**Need your help to decide**

Question-1 : What size of sever i will be procured ?  
Question-2 : How much need memory+ disk+ cores etc technically ?  
Question-3 : Security suggestions

Thanks in advance !!!!

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 20, 2019, 7:01am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/2 "2019-09-20T07:01:24Z")

</div>

Without knowing how much data this will generate or how long you are going to keep the data it is hard to give any recommendations.

---

<div class="post-metadata">

**Author:** ![elk.beginners](https://avatars.discourse-cdn.com/v4/letter/e/ec9cab/32.png) [@elk.beginners](https://discuss.elastic.co/u/elk.beginners)\
**Post date:** [September 20, 2019, 7:02am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/3 "2019-09-20T07:02:28Z")

</div>

let me share you one data stats of my pilot project with testing server.

---

<div class="post-metadata">

**Author:** ![elk.beginners](https://avatars.discourse-cdn.com/v4/letter/e/ec9cab/32.png) [@elk.beginners](https://discuss.elastic.co/u/elk.beginners)\
**Post date:** [September 20, 2019, 7:07am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/4 "2019-09-20T07:07:10Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/9/7947a9b5ecefae9ffd5da5bacda2ea5e77ff51b8.png)

and

@ [Christian\_Dahlqvist]

here above snap which I started as pilot/test to actual work load and its captured continuous data from last 3 weeks. yesterday, I stopped because need to decide other things.

Now what you say about this ?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/c/ec94ab5cd238f61be28eefb8c31dd797d517ca27.png)

---

<div class="post-metadata">

**Author:** ![elk.beginners](https://avatars.discourse-cdn.com/v4/letter/e/ec9cab/32.png) [@elk.beginners](https://discuss.elastic.co/u/elk.beginners)\
**Post date:** [September 20, 2019, 7:18am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/5 "2019-09-20T07:18:02Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/d/7/d7895ef4182490bba7c09c9eb496c10b6a859577.png)

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 20, 2019, 7:28am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/6 "2019-09-20T07:28:21Z")

</div>

It does not tell me anything apart from that you have far too many small indices and shards.

---

<div class="post-metadata">

**Author:** ![elk.beginners](https://avatars.discourse-cdn.com/v4/letter/e/ec9cab/32.png) [@elk.beginners](https://discuss.elastic.co/u/elk.beginners)\
**Post date:** [September 20, 2019, 8:18am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/7 "2019-09-20T08:18:38Z")

</div>

So you can tell me which information I will provide that can be more confidently said about my requirement ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 18, 2019, 8:27am UTC](https://discuss.elastic.co/t/guidance-for-production-elk-stack-box-size-and-other-memory-components-discuss/200357/8 "2019-10-18T08:27:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
