I have ELK stack on AWS. It has capacity of around 5000 UDP msg/sec.
I want to scale it up to capacity of 20,000 msg/sec. What would be the recommended architecture for ELK stack.
Will it help If I keep N number of small instance installed logstash on all instance behind load balancer and keep Elasticsarch cluster on all instances or I keep bigger single instance.
And what option is better for future upgrade. ?