For scalable and distributed indexing of events in production environments, you must set up additional Elasticsearch nodes in a cluster mode. To install and configure Elasticsearch in a cluster mode, see Installing and Configuring Elasticsearch.