I have an elastic instance,
memory size: 2g.
I have 5 apps (lets call them aa, bb, cc, dd, ff) each has production and sandbox environment
each app logs approximately 50,000 messages a day (production environment)
production logs should be kept forever, about sandbox logs I don't really care and they are deleted every week.
currently this is my index:
e.g. : aa-production-2017.04.25
on kibana I created 5 index-patterns:
aa-* bb-* cc-* ..
since daily indexing caused high memory pressure & slowness I would like to get some advice on using elastic correctly.
is using monthly indexes recommend? will this slow my search?
or I should use weekly indexes? note I have 5 apps, which I will need their logs for long term
what should I do to make sure I get good performance and make sure I use elastic the best way?