Hi folks,
I am building an elk cluster to index and search lots of http access log, about more than 7000Event per second and also there will be more than 100 cocurrent searchs. I have 2 machines. One of them has 24 cpu cores, 64G memory and 2T sata disk(no raid). The other one is much powerful, which has 24 core cpu, 384G memory and 300G sas disk*8. My plan is to build a 3-node elasticsearch, one running on small server, the other two running on the big one. Can I route all index request to one node while all search request to the other two nodes? Is this a good idea to do like this? Any comments? Thank you guys and happy holiday! Alan -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/000801d019ac%2400659130%240130b390%24%40gmail.com. For more options, visit https://groups.google.com/d/optout.
