I would recommend monitoring CPU usage on the nodes over a period of time that covers you peak load period(s). That way you will get an idea how many logical CPU cores you actually use. Setting up Elasticsearch monitoring should give you an indication but you can also use other tools and monitor this at the OS level.