Thank you :),
Will definitely keep Logstash and Elasticsearch on separate machines .
What do you suggest about architecture. I currently run on 16 GB of memory, 4 core with capacity of around 4500 to 5000 msg/sec.
Do we just upgrade machine or we go for multiple smaller instances ?