Handle errors during indexing more gracefully. Option to start in embedded mode or connecting to existing cluster.
Disabling _source to save space. Using docvalues to save memory.
Add metrics so we can monitor ourselves.
Add overview dashboard that displays recently active hosts/applications.