Hi Daud_Ahmed
Did you ever find out the answer to your original question regarding which hosts must be included in the output.elasticsearch hosts property (master, data, indest)? My guess is it's the data nodes unless you're using logstash or dedicated ingest nodes, but the ingest/pipeline nodes also have to send their data somewhere. I agree it's confusing for a beginner like me. I've searched and searched Elastic's documentation and I just can't find a definite answer. The documentation always just says "Elasticsearch nodes".