Index per organization or one index for all organizations to scale

I have one multitenant application that is storing lof of data like events in elasticsearch, each organization will search events only from their organization.

My question is about query/search perfomance and speed to scale up to hundreds of organizations, it is better to have one index per organization like:

events_orgA
events_orgB
events_orgC

Or the performance is the same if we only have one index events for all organizations and we search filtering by Org

any idea on this? I need to structere my application correctly in one way or the other.

There is a couple of pages about this in the definitive guide. You can read it at https://www.elastic.co/guide/en/elasticsearch/guide/current/user-based.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.