Layer A: Data is usually first written here, and we have the best possible performance for indexing and search.Layer B: Data is moved here from other layers and it is searchable, although the performance is not as good as the above layer. Data is backed up to an object store and does not require any user action for archival or restore — it is done automatically by the … [Read more...] about What’s the difference? Elastic and Splunk data tiers
News and How to's