18.1 Prerequisite

For scalable and distributed indexing of events in production environments, you must set up additional OpenSearch nodes in a cluster mode. To install and configure OpenSearch in a cluster mode, see Installing OpenSearch.