12.0 Installing and Configuring Elasticsearch

For scalable and distributed indexing of events you must install Elasticsearch in cluster mode. The Elasticsearch cluster you install for Sentinel must be used to index only Sentinel data.