# How to manage three kinds of log for different business teams **URL:** \ **Category:** Elasticsearch\ **Created:** [June 18, 2014, 8:21am UTC](https://discuss.elastic.co/t/how-to-manage-three-kinds-of-log-for-different-business-teams/18175 "2014-06-18T08:21:35Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Villiers\_Tientcheu\_N](https://avatars.discourse-cdn.com/v4/letter/v/fbc32d/32.png) [@Villiers\_Tientcheu\_N](https://discuss.elastic.co/u/Villiers_Tientcheu_N)\ **Post date:** [June 18, 2014, 8:21am UTC](https://discuss.elastic.co/t/how-to-manage-three-kinds-of-log-for-different-business-teams/18175/1 "2014-06-18T08:21:35Z")
Hi, Thanks for Elasticsearch. I have three kinds of log: system, mail and ossec logs, to manage separetly for three different teams of a big business. How many cluster should I have to get it work fine? Three or One? And regards space disk, how to determine it per elasticserach node? Thanks! -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/3444974b-c58b-443a-9d87-cf7e952dd235%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/3444974b-c58b-443a-9d87-cf7e952dd235%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 18, 2014, 8:28am UTC](https://discuss.elastic.co/t/how-to-manage-three-kinds-of-log-for-different-business-teams/18175/2 "2014-06-18T08:28:41Z")
Just use one and then split the data into their own indexes. As for the second question, that depends on all sorts of things. Best to startup a trial and go from there. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com) web: [www.campaignmonitor.com](http://www.campaignmonitor.com) On 18 June 2014 18:21, Villiers Tientcheu Ngandjeuu \< [tientcheuvilliers@gmail.com](mailto:tientcheuvilliers@gmail.com)\> wrote: > Hi, > Thanks for Elasticsearch. I have three kinds of log: system, mail and > ossec logs, to manage separetly for three different teams of a big > business. How many cluster should I have to get it work fine? Three or One? > And regards space disk, how to determine it per elasticserach node? > Thanks! > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/3444974b-c58b-443a-9d87-cf7e952dd235%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/3444974b-c58b-443a-9d87-cf7e952dd235%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/3444974b-c58b-443a-9d87-cf7e952dd235%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/3444974b-c58b-443a-9d87-cf7e952dd235%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624a%2B0qiFUy7rgRrbnmGiexGB5gKuM4RR8zvOm9ewksWV9A%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624a%2B0qiFUy7rgRrbnmGiexGB5gKuM4RR8zvOm9ewksWV9A%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Villiers\_Tientcheu\_N](https://avatars.discourse-cdn.com/v4/letter/v/fbc32d/32.png) [@Villiers\_Tientcheu\_N](https://discuss.elastic.co/u/Villiers_Tientcheu_N)\ **Post date:** [June 18, 2014, 9:34am UTC](https://discuss.elastic.co/t/how-to-manage-three-kinds-of-log-for-different-business-teams/18175/3 "2014-06-18T09:34:08Z")
Thanks, Mark for your answer! Le mercredi 18 juin 2014 10:21:36 UTC+2, Villiers Tientcheu Ngandjeuu a écrit : > Hi, > Thanks for Elasticsearch. I have three kinds of log: system, mail and > ossec logs, to manage separetly for three different teams of a big > business. How many cluster should I have to get it work fine? Three or One? > And regards space disk, how to determine it per elasticserach node? > Thanks! -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/817cda4c-5b60-4654-b63c-bae4ba58117b%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/817cda4c-5b60-4654-b63c-bae4ba58117b%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:21am UTC](https://discuss.elastic.co/t/how-to-manage-three-kinds-of-log-for-different-business-teams/18175/4 "2017-07-06T01:21:35Z")