I am running hundreds of servers across the globe. Right now all these servers are pushing the data to centralized ELK cluster. I want to make a regional log collection system. Like all EU servers should send all logs to the EU cluster likewise for Japan servers.

Maintaining ELK clusters per region can be a pain and paying a huge amount to AWS Elastic Search Service is not a good idea.

Do you guys have some better suggestions? Any tools or best practices I should follow for this project?