I am attempting to build self-hosted deployment for SIEM purposes. I would like to use Platinum license features. I wonder how many licenses are required for following build:
- Hot tier (logs ingestion and fast 7 days data access)
- Warm tier (up to one year logs retention)
- Integrations server (integrations + Fleet)
- Bonus: Machine Learining node
Is licensing per node or per cluster? How many licenses do I need for above setup?