Hi, We have an index that is feeding in data from an EKS/K8s infrastructure and getting roughly 4million events / 15 minutes (during peak). The index is doing roughly 80GB/day. Running queries on the data works great if you search within the current day however running historical searches on the data even using the proper fields specific to what I want to search for takes a very long time and the load on my indexers shoots up very high. I have not modified any of the index params for this index in indexes.conf. This is a smartstore index and I have roughly 500GB of cache setup for caching locally. If anyone could let me know what tweaks might be best for this it would be greatly appreciated.  ... View more

Would anyone have an up to date way of looking at all indexes and if an index has not received any data in 60 minutes or so alert? I have seen several ways of looking at this by host but would prefer to look at it from the index level.   Thanks!!  ... View more