If anybody is looking for an alternative I recommend checking out Gravwell. They use a similar syntax but use an architecture that makes scaling horizontally easier. They also have a free tier that lets you index around 14GB/ day:

https://www.gravwell.io/newsroom/gravwell-upgrades-community...

Disclaimer: we use them at Shodan and I'm on their board.