I wanted to ask a best practice for the following problem:
I have three types of documents:
For my mapping I have setup the *User *to be the parent of the other two
documents *IncomingLog *and OutgoingLog. Users are my user base whereas
log documents are historical data. I do this to perform various
parent/child queries to fetch users that match specific criteria based on
their log history.
What I'm wondering is that after some time the logs will become huge
therefore I need to do some time flow of data by changing and index every
lets say month for log documents. What is the best possible way of doing
that? given that the Users are not historical data and i cannot change
index along with the log docs. I know that parent/child documents are
sharded in the same shard, can we say that we can have one index for the
users, without creating a new one each month but have an other index for
the logs and creating a new one each month and combining them with an
alias?? My users are way to many (I think) around 10 milliion or even more,
to create one index per user, and it does not seems obvious to me if this
is a good thing to do.
What do you suggest??
Thank you in advance.
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firstname.lastname@example.org.
For more options, visit https://groups.google.com/groups/opt_out.