# Configuration of kibana with cross cluster search

**URL:** <https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186>\
**Category:** Elasticsearch\
**Created:** [January 26, 2018, 11:05am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186 "2018-01-26T11:05:48Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![bbailey](https://avatars.discourse-cdn.com/v4/letter/b/ebca7d/32.png) [@bbailey](https://discuss.elastic.co/u/bbailey)\
**Post date:** [January 26, 2018, 11:05am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/1 "2018-01-26T11:05:48Z")

</div>

I am switching my multi-cluster installation from using kibana running on a tribe node to using kibana with cross cluster search running on a single standalone elasticsearch node. From the documentation it appears to be recommended to use gateway nodes but there is no clear definition of what a gateway node is.

Old setup  
DC1 cluster - 3 data nodes, 3 master nodes, 1 tribe/kibana node  
DC2 cluster - 3 data nodes, 3 master nodes  
DC3 cluster - 2 data nodes, 3 master nodes

New setup  
DC1 cluster - 3 data nodes, 3 master nodes  
DC2 cluster - 3 data nodes, 3 master nodes  
DC3 cluster - 2 data nodes, 3 master nodes  
Kibana - 1 data/master/kibana node

**Question 1. Is a gateway node simply a client node ( i.e. node.master:false node.data:false node:ingest:false )**

I have currently set up my cross cluster search seeds to be the 3 master nodes in each cluster

**Question 2. Should I instead add at least one gateway node to each cluster and configure these as my seeds ?**

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 30, 2018, 9:24am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/2 "2018-01-30T09:24:30Z")

</div>

> [@bbailey](#):
>
> Question 1. Is a gateway node simply a client node ( i.e. node.master:false node.data:false node:ingest:false )

It's the node(s) that the cross cluster configuration uses to talk to. It explains it here - [Cross-cluster search | Elasticsearch Reference [6.1] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/6.1/modules-cross-cluster-search.html)

> [@bbailey](#):
>
> Question 2. Should I instead add at least one gateway node to each cluster and configure these as my seeds ?

Nope, see above.

---

<div class="post-metadata">

**Author:** ![bbailey](https://avatars.discourse-cdn.com/v4/letter/b/ebca7d/32.png) [@bbailey](https://discuss.elastic.co/u/bbailey)\
**Post date:** [January 30, 2018, 9:57am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/3 "2018-01-30T09:57:54Z")

</div>

Thanks Mark

Would you advise me to set the seed nodes in the cross-cluster configuration as the master nodes (as it is now) or the data nodes ? or all nodes ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 31, 2018, 2:40am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/4 "2018-01-31T02:40:24Z")

</div>

I'd use the data nodes, because they are the ones best used for queries (unless you had coordinating nodes) 🙂

---

<div class="post-metadata">

**Author:** ![bbailey](https://avatars.discourse-cdn.com/v4/letter/b/ebca7d/32.png) [@bbailey](https://discuss.elastic.co/u/bbailey)\
**Post date:** [January 31, 2018, 8:44am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/5 "2018-01-31T08:44:54Z")

</div>

That was what I meant in my "question 2" above but I guess I have the wrong terminology.

So I should either use the existing data nodes in each cluster as seeds or add at least one **coordinating** node to each cluster and use these as the seeds

You've been a great help, thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 31, 2018, 8:12pm UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/6 "2018-01-31T20:12:41Z")

</div>

> [@bbailey](#):
>
> So I should either use the existing data nodes in each cluster as seeds or add at least one coordinating node to each cluster and use these as the seeds

Yep! 😃

---

<div class="post-metadata">

**Author:** ![alexus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexus/32/12696_2.png) [@alexus](https://discuss.elastic.co/u/alexus)\
**Post date:** [January 31, 2018, 8:45pm UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/7 "2018-01-31T20:45:34Z")

</div>

[Using Kibana in a Production Environment | Kibana User Guide [6.1] | Elastic](https://www.elastic.co/guide/en/kibana/current/production.html)

the ideas is to run coordinate only elasticsearch node and kibana would access your cluster through that node.

---

<div class="post-metadata">

**Author:** ![bbailey](https://avatars.discourse-cdn.com/v4/letter/b/ebca7d/32.png) [@bbailey](https://discuss.elastic.co/u/bbailey)\
**Post date:** [February 1, 2018, 10:59am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/8 "2018-02-01T10:59:43Z")

</div>

It seems that if I run Kibana on a coordinating node in one cluster that I am then unable to search across both the local indices in that cluster AND remote nodes

> [@How to run cross cluster search across local and remote indices](https://discuss.elastic.co/t/how-to-run-cross-cluster-search-across-local-and-remote-indices/117997):
>
> I am trying to setup my environment so that I can switch from using tribe nodes to use cross cluster search and running in to a few problems After some useful feedback in this forum I have configured my system with kibana pointing to a coordinating node in cluster\_1 with cross cluster search configured so I can also search indices in cluster\_2 and cluster\_3. I can configure index patterns in Kibana to search for logs as follows:- logstash-\* returns all local logs in clu…

This would suggest that the only way to search across multiple clusters would be to run kibana on a completely separate elasticsearch node so that I can use a wildcard in my index pattern to read data from all clusters.

( I have to point out though that I am using version 5.6.2 as there are limitations in my configuration that may prevent me from moving to 6.x yet )

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 1, 2018, 11:00am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186/9 "2018-03-01T11:00:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
