Hi Mike, you could build something like this using a Hot/Warm architecture in Elasticsearch, see https://www.elastic.co/blog/hot-warm-architecture for an example.
We might also add this directly into Graylog in a future release. Cheers, Jochen On Thursday, 18 February 2016 21:31:31 UTC+1, Mike Daoust wrote: > > I wondered if anyone is moving data over X days old to slower nodes in > order to keep the most recent data performing as fast as possible. Do you > have any advice or articles I could reference? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2b7f9135-c7aa-438d-b3a1-d2f1b106d223%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
