Jeroen, If your objective is to keep the ES storage as minimal as possible, you'd probably want to understand first what your search requirements are and then optimize the ES indexes accordingly. For example, if you don't need replicas, then you can set it to 0. If you don't need the _all field, you can disable it (using index templates for example). If you don't need every single field from your log event indexed, then you can direct your LS filters to only output specific fields that you are interested in. Etc, etc...
-- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/105b2dac-33aa-44ad-8961-229b3aad4905%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
