I use elasticsearch for logfile analysis. I use rolling indeces on a daily
basis. I use 2 elasticsearch-servers behind a loadbalancer. The data is
sent to the load balancer and then inserted on the according server. I use
1 index with 1 shard and 1 replica. So there is "one file" on both server.
The data is queried through the load balancer as well. And I am always
querying the current day and the same day last week.
My question now is: Would it be better to use a daily index with 2 or more
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firstname.lastname@example.org.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/3b3fb4ff-0bc1-4b83-ac2d-d421d6f8ad06%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.