We have an ElasticSearch cluster in the cloud and our application generates multiple different logs, a dozen different log files everyday. All of the logs are ingested into same index in elasticsearch with daily rotation. We find now the logs are huge in ElasticSearch and need to find out which log files is contributing most from which server it is coming from.