Well that’s a big use case that ES is meant for. There’s also the fact that ES is easy to shard. At my previous gig we easily had over terabyte of data written

Well that’s a big use case that ES is meant for. There’s also the fact that ES is easy to shard. At my previous gig we easily had over terabyte of data written into ES indices every day, with hundreds of TBs worth of documents searchable in various indices, and none of this is even counting the logging use case. Used it extensively for calculating various aggregations (for reporting/analytics) of events.