All, We just finished implementing https://www.elastic.co/blog/hot-warm-architecture <https://www.elastic.co/blog/hot-warm-architecture?blade=tw> for our Graylog environment. After weeks of troubleshooting elasticsearch performance issues with our budget ES nodes, the addition of a two small SSD nodes REALLY made a difference. Our output buffers had been filling up from time to time, and this appears to have resolved that issue.
If anyone is interested, we will post our config information. Dustin Tennill EKU -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0f5184db-aefc-46c5-a266-500e1b21c680%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
