Index per organization or one index for all organizations to scale

Elastic Stack Elasticsearch
1

I have one multitenant application that is storing lof of data like events in elasticsearch, each organization will search events only from their organization.

My question is about query/search perfomance and speed to scale up to hundreds of organizations, it is better to have one index per organization like:

events_orgA
events_orgB
events_orgC

Or the performance is the same if we only have one index events for all organizations and we search filtering by Org

2

any idea on this? I need to structere my application correctly in one way or the other.

3

There is a couple of pages about this in the definitive guide. You can read it at https://www.elastic.co/guide/en/elasticsearch/guide/current/user-based.html