Whether to use multiple index in a dashboard or one index

Well, Elasticsearch doesn't do joins or have a concept of foreign keys. All the fields you need for a single visualization need to be in a single index pattern. Does that help?