Insert accounting data in a ES cluster

I'm using it in production and work well.

Take care of default template in ES : job-foo_bar is 3 words. Change mapping, for example :
put _template/torque
{
  "template": "torque-*",
  "settings": {
    "index.number_of_replicas": "1",
    "index.refresh_interval": "5s",
    "index.number_of_shards": "5"
  },
  "mappings": {
    "torque": {
      "properties": {
        "user" : {"type" : "string", "analyzer" : "whitespace" },
        "job" : {"type" : "string", "analyzer" : "whitespace" },
        "jobname" : {"type" : "string", "analyzer" : "whitespace" },
        "exec_host" : {"type" : "string", "analyzer" : "whitespace" }
      }
    }
  }
}