logstash100 are getting old and need replacement. Those servers are used only as logstash endpoints and are thus not consuming much in term of IO or CPU.
- Intel(R) Xeon(R) CPU E5-2420 0 @ 1.90GHz
- 6 CPU, not hyperthreaded
- 2x 500GB spinning HDD (only 50GB allocated)
- 16 GB RAM
This makes them good candidates to move to VMs on Ganeti.
Note that this VMs should be spread across rows as much as possible, but in Ganeti this means that 2 of the 3 VMs will share the same row. A single VM should be able to support the load, so that's OK.
New specs (VM, spec per VM / total):
- CPU: 4 / 12
- HDD: 50GB / 150GB
- RAM: 8GB / 24GB
Note 2: initial hardware request was done on T173298.
Side note: currently most applications send log to a specific logstash server. Application should start using the LVS endpoint (logstash.svc.eqiad.wmnet) instead.