Sizing Elasticsearch Data Streams with ILM: An Architecture Note for Log and Metrics Storage
An architecture note on the minimal Elasticsearch data stream + ILM design for logs and metrics: sizing rollover by shard size, trust boundaries, operational checks, and when to redesign.
elasticsearch