Hi @ariemenschneider, I have a followup question.
Do we really need 3 data node types (hot, warm, cold)? We ingest quite a lot of data, so the hot nodes are only used for 2 hours, the rest is moved to warm nodes.
It looks like the hot phase is very short, so those hot boxes aren't doing that much work.
Is it a better approach to just combine the hot and the warm nodes on SSD nodes (as the hot->warm phase is only used to rollover the indexes)?