Hello, I am just wondering on the Discover page I have logs from my event viewers and on the beat.hostname it's only allowing 500/500 records, do I have to pay to increase this or?
No, it can be adjusted through the discover:sampleSize parameter under Management -> Advanced Settings. Be aware that increasing this can have a negative impact on performance as loading and processing large number of documents can be slow.