Hello,
On Sun, May 12, 2013 at 8:01 AM, mailtov16@gmail.com wrote:
I am using logstash+ elastic-search+kibana framework for my project. I
want to create per tenant index in Elastic search. Is this a efficient way
to do?
I think it depends on how many indices you'll end up having. If you'll have
a huge amount of indices, they'll use up more space, more memory and more
file descriptors. Because you'll have more shards, and therefore more
segments. Although, you can tune the number of shards and the merge
policyhttp://www.elasticsearch.org/guide/reference/index-modules/merge/to
have less segments.
However, when you search for data from a single tenant, it should be faster
than if you mix all data up and do the same search by filtering on a field.
Because there's less data to search on.
Can i customize Elasticsearch to look for a specific tag in logstash
output and create and store the data in particular index?
I'm not sure exactly what you're after, but it sounds like you want to
index different types of data in different places. If that's so, I think
logstash is the place where you can configure, for example, the destination
index name to depend on a variable. People on the Logstash mailing list
will definitely know more about what you can do here.
Best regards,
Radu
http://sematext.com/ -- Elasticsearch -- Solr -- Lucene
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.