For mixed workload servers I tend to go for 1GB swap, vm.swappiness=0 and then alerts on around 300-400MB of swap usage. I found alerting on swap to be the best indicator of impending doom, whether it's from a slow memory leak or a buildup from an i/o bottleneck.