(sameless plug of Sumo Logic employee) The SaaS vendors are much better solution for logs, such as Sumo Logic. They have multiple tier of data (continuous, fre

(sameless plug of Sumo Logic employee) The SaaS vendors are much better solution for logs, such as Sumo Logic. They have multiple tier of data (continuous, frequent, infrequent) which different performance and cost trade-offs. Most companies would be better, dividing logs into different category than running and tuning Elastic Search.