Performance turning

[sjesse]

Is there any performance tuning or sizing recommendations for the interface being slow when keeping a large number of indicies open? We originally had 30 days open, but working with someone else they suggested only keeping 7 and that helped the the speed of the interface, but we'd optimally like to keep 30 days worth. Right we have a cluster of 2 instances and both are using the almost full 64GB of ram we have allocated.

[cdienger]

Making the queries and dashboards more efficient will help - for example, limiting the searches to look at small time periods, querying specific fields, and avoiding wild cards(*). See https://library.nagios.com/library/prod ... zing-logs/.