Hi Mike, you could build something like this using a Hot/Warm architecture in Elasticsearch, see https://www.elastic.co/blog/hot-warm-architecture for an example.
We might also add this directly into Graylog in a future release. Cheers, Jochen On Thursday, 18 February 2016 21:31:31 UTC+1, Mike Daoust wrote: > > I wondered if anyone is moving data over X days old to slower nodes in > order to keep the most recent data performing as fast as possible. Do you > have any advice or articles I could reference? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2b7f9135-c7aa-438d-b3a1-d2f1b106d223%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
