Hi, I use elasticsearch for logfile analysis. I use rolling indeces on a daily basis. I use 2 elasticsearch-servers behind a loadbalancer. The data is sent to the load balancer and then inserted on the according server. I use 1 index with 1 shard and 1 replica. So there is "one file" on both server. The data is queried through the load balancer as well. And I am always querying the current day and the same day last week.
My question now is: Would it be better to use a daily index with 2 or more shards? Greetings, Valentin -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/3b3fb4ff-0bc1-4b83-ac2d-d421d6f8ad06%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
