# What's the best for Eleasticsearch ? (managment of index)

**URL:** https://discuss.elastic.co/t/whats-the-best-for-eleasticsearch-managment-of-index/101841
**Category:** Elasticsearch
**Created:** [September 26, 2017, 12:21pm UTC](https://discuss.elastic.co/t/whats-the-best-for-eleasticsearch-managment-of-index/101841 "2017-09-26T12:21:09Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![andrieuxa](https://avatars.discourse-cdn.com/v4/letter/a/5e9695/32.png) [@andrieuxa](https://discuss.elastic.co/u/andrieuxa)
#### Post date: [September 26, 2017, 12:21pm UTC](https://discuss.elastic.co/t/whats-the-best-for-eleasticsearch-managment-of-index/101841/1 "2017-09-26T12:21:09Z")

</div>

Hi,

First of all, i'm sorry if my english is not totaly correct.

I have a question on Elasticsearch about the management of index.

My question : For Elasticsearch, it's better : **manage a lot index with small size** or **manage few index with bigger size**?

At the moment, we using ELK for centralize servers logs.

every day an index is created for each application/service.

Exemple :

postfix-2017.09.26  
apache-2017.09.26  
glpi-2017.09.26  
...

With that, I have many more than 1000 index in my ELK.

Would not it be better for Eleasticsearch to manage everything in a single index for the day ?

log-2017.09.26  
log-2017.09.27  
....

Thank you for your help 🙂

AA

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [September 26, 2017, 12:23pm UTC](https://discuss.elastic.co/t/whats-the-best-for-eleasticsearch-managment-of-index/101841/2 "2017-09-26T12:23:43Z")

</div>

[Having a lot of very small shards and indices can be very inefficient](https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster), so consolidating into fewer larger indices will most likely allow to to handle more data in the cluster.

---

<div class="post-metadata">

### Author: ![andrieuxa](https://avatars.discourse-cdn.com/v4/letter/a/5e9695/32.png) [@andrieuxa](https://discuss.elastic.co/u/andrieuxa)
#### Post date: [September 26, 2017, 2:47pm UTC](https://discuss.elastic.co/t/whats-the-best-for-eleasticsearch-managment-of-index/101841/3 "2017-09-26T14:47:25Z")

</div>

Thank you very much, this helped me to understand how to handle shards and indexes.

AA

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 24, 2017, 2:47pm UTC](https://discuss.elastic.co/t/whats-the-best-for-eleasticsearch-managment-of-index/101841/4 "2017-10-24T14:47:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.