I know this is not an easy question to answer but still any idea can help here . Curious to know how many ES nodes will be sufficient to handle 400 GB/day data volume . I have gone through this blog(https://www.elastic.co/blog/elasticsearch-storage-the-true-story-2.0 AND ) and this is what my requirement is
Sting Fields :- analyzed and not_analyzed
_all :- disabled
No of users :- 70+
Data Type :- Structured
Data Storage :- 30 Days
Replication factor :- 3 or 4
Search Type;- Users will be opening Dashboards , which will have lots of aggregated data .