In our team we have ELK stack running on for 2 years now and I can agree, ES loves consuming memory, a loot. :)
But configuring that for our purposes was extremely easy, especially with docker images for ES 5 and ES 6 now..
It is interesting what you mention on filtering, is it really not better to filter results before feeding that to query? I guess it is something guys are advising.
In our team we have ELK stack running on for 2 years now and I can agree, ES loves consuming memory, a loot. :)
But configuring that for our purposes was extremely easy, especially with docker images for ES 5 and ES 6 now..
It is interesting what you mention on filtering, is it really not better to filter results before feeding that to query? I guess it is something guys are advising.
I felt filtering is an overkill, if you can do things with query. But yeah nice to hear informations like above. Thanks.