Amount of RAM and CPU

[technosol]

Hi

Can you please help me to fix this situation; quite critical.

one of my customer having a multi-site 2-node cluster. (Cluster 1 and 2, each having 2 nodes)

However nls is receiving quite a high payload of syslogs which causes consume more RAM. As I know I have optimized the logstash, elasticsearch and httpd configurations to run the system without crashing. One "SET" of syslog clients already have been integrated with the nls cluster. Again we have to integrate another 2 - same set of syslog nodes with this nls cluster. which means, definitely nls will receive a really unhandleable amount of a load of data.

Just to face for this situation; I am planning to increase RAM and CPU.

Currently; 32GB 2, instances with 8 core CPU

Up to what level, we can increase the RAM and CPU? Can I propose; 128 GB RAM, 16 core CPU. or 128 GB and Same 8 core CPU?

Please, advice

Thank you.

[npolovenko]

Hello, @technosol. I would not recommend going over 64Gb of RAM on a single instance. 16 cores should work fine.
https://www.elastic.co/guide/en/elastic ... ml#_memory