Hi Chris,
We have many services using the same set of indexes, and "type" can be used to distinguish between them.
Regards,
Andrew.
________________________________________
From: Testbed Support for GridPP member institutes [[log in to unmask]] on behalf of Chris Brew [[log in to unmask]]
Sent: Friday, October 13, 2017 11:19 AM
To: [log in to unmask]
Subject: ELK Stack question
Hi All,
Those of you who have are running the ELK stack, do you put all the different sources of data into the same indexes in elastic search or do you have separate sets of indexes for different data sources.
So, at the moment, I’ve only got one data source (dCache billing logs) which is going into filebeat-YYYY-MM-DD, would it be better to have, say, the argus logs going into the same indexes or should I be separating them?
Thanks,
Chris.
--
Dr Chris Brew
Scientific Computing Manager
Particle Physics Department
STFC - Rutherford Appleton Laboratory
Harwell Oxford,
Didcot
OX11 0QX
+44 1235 446326
|