Infrastructure for deploying a security information and event management application on a container platform

A system comprising:

• a plurality of hosts operable to run a Security Information and Event Management (SIEM) application, each of the hosts including a processing resource, a memory, and a storage device, and wherein the plurality of hosts is part of a stretch cluster spanning a plurality of data centers, wherein
• each host of a first subset of the plurality of hosts runs a plurality of containerized instances of at least one component of the SIEM application within respective containers, and
• at least one host of the plurality of hosts is separate from the first subset and is dedicated to running at least one containerized ingress gateway application operable to load balance requests directed to the SIEM application among the plurality of containerized instances running on the first subset of hosts, wherein the at least one component of the SIEM application running on a particular host of the first subset includes an indexer component of the SIEM application, and an ingestion rate of the particular host is a function of the number of the plurality of containerized instances of the indexer component.