# Index and Type creation

**URL:** <https://discuss.elastic.co/t/index-and-type-creation/102085>\
**Category:** Elasticsearch\
**Created:** [September 28, 2017, 9:34am UTC](https://discuss.elastic.co/t/index-and-type-creation/102085 "2017-09-28T09:34:06Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![faoc](https://avatars.discourse-cdn.com/v4/letter/f/c2a13f/32.png) [@faoc](https://discuss.elastic.co/u/faoc)\
**Post date:** [September 28, 2017, 9:34am UTC](https://discuss.elastic.co/t/index-and-type-creation/102085/1 "2017-09-28T09:34:06Z")

</div>

Hi,

I would like to ask you about some strategy about index and types. I will send to Elasticsearch about 1 million messages per day and i have 6 kind of messages. Should i creeate 6 types?  
And about index performance, should i create an index per month or could be better has a index per day?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 28, 2017, 9:49am UTC](https://discuss.elastic.co/t/index-and-type-creation/102085/2 "2017-09-28T09:49:56Z")

</div>

Have a look at [this thread](https://discuss.elastic.co/t/best-practices-for-indexing-log-data/101891) which discussed much the same thing. With such a low volume I would recommend using monthly rather than daily indices and store all data in a single index if possible.

---

<div class="post-metadata">

**Author:** ![noky](https://avatars.discourse-cdn.com/v4/letter/n/aca169/32.png) [@noky](https://discuss.elastic.co/u/noky)\
**Post date:** [September 28, 2017, 1:49pm UTC](https://discuss.elastic.co/t/index-and-type-creation/102085/3 "2017-09-28T13:49:58Z")

</div>

Hi Christian,

Did you link the wrong thread? The link you sent me was the discussion  
between the two of us!

Also, not exactly sure how you ascertained that our usage would be low  
volume. We are trying to aggregate logs from various  
projects/departments... the raw apache access+error logs from one project  
alone are typically over 1.5G/day. Does that really constitute low volume?  
Do you really think we can get away combining those logs with logs from  
other projects and use a monthly index? That doesn't sound right at all...

Mike Charnoky

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 28, 2017, 2:28pm UTC](https://discuss.elastic.co/t/index-and-type-creation/102085/4 "2017-09-28T14:28:59Z")

</div>

Hi Mike,

I posted a link to your thread in this thread as it discusses how to organise data into indices and types. This thread discusses a million messages per day, which I suspect is a relatively low volume, so the advice does not necessarily apply to your use case.

Christian

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 26, 2017, 2:29pm UTC](https://discuss.elastic.co/t/index-and-type-creation/102085/5 "2017-10-26T14:29:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.