If anybody is looking for an alternative I recommend checking out Gravwell. They use a similar syntax but use an architecture that makes scaling horizontally ea

If anybody is looking for an alternative I recommend checking out Gravwell. They use a similar syntax but use an architecture that makes scaling horizontally easier. They also have a free tier that lets you index around 14GB/ day: https://www.gravwell.io/newsroom/gravwell-upgrades-community-edition-to-help-users-explore-and-gather-deeper-insights-about-their-data-at-no-additional-cost https://www.gravwell.io/newsroom/gravwell-upgrades-community... Disclaimer: we use them at Shodan and I'm on their board.