This is a valid requirement since log analyzer and NetFlow/SFlow module needs huge disk storage and hence may need to move Elastic Search engine database to be placed in machine where enough disk storage is available.
Please follow steps outlined in attached document Running Elasticsearch in different Host.docx (376.7 KB)