hi,
currently I'm using the slowlog feature on cluster (3 master, 10 data, 2 coordinating only).
These are my settings:
"search" : {
"slowlog" : {
"level" : "trace",
"threshold" : {
"fetch" : {
"warn" : "1s",
"trace" : "200ms",
"debug" : "500ms",
"info" : "800ms"
},
"query" : {
"warn" : "2000ms",
"trace" : "500ms",
"debug" : "1000ms",
"info" : "1500ms"
}
}
}
}
Do you know anything about potential deterioration of cluster performance (I am referring to the cluster that generates slowlog data, not to my monitoring cluster)?
Daily it will create index with docs.count
220k and size
1.2 gb.
I removed the truncating character from log4j.properties file
, so I do not truncate generated query after 1000 characters.
thanks