Setup a elastic cluster

Hi,

You are not the first (and probably not the last) to raise this question, however asking it
is a lot less difficult as answering. Sizing of elastic stack is dependent on a lot of variables, for example:

  • data throughput
  • retention requirements
  • how fast you want results to be
  • which usecases are used (e.g. observability, security, enterprise search, etc).

To name a few of the variables you have to think of.

Some resources which should help you on the way to start answering your question:

  1. Benchmarking and sizing your Elasticsearch cluster for logs and metrics
  2. Sizing Elasticsearch
  3. Sizing the Elastic Stack for Security Use Cases

It helps the community if you go through this and use it to ask more specific questions and context.

I hope this helps you on your way.

3 Likes