# Cross Cluster Search using ELBs of remote ES cluster

**URL:** <https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089>\
**Category:** Elasticsearch\
**Created:** [June 12, 2017, 6:23pm UTC](https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089 "2017-06-12T18:23:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jayanna\_Hallur](https://avatars.discourse-cdn.com/v4/letter/j/a4c791/32.png) [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\
**Post date:** [June 12, 2017, 6:23pm UTC](https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089/1 "2017-06-12T18:23:13Z")

</div>

Hi

I have 2 elastic search clusters.

Both cluster have ELBs for datanode & co-ordinator nodes set as the number of nodes can be increased/decreased. As we have deployed ELK stack in AWS cloud and do rehydration every 30 days, the IP address will change.

Hence, we would like to use ELBs names for logstash & kibana to connect to the Elastic search cluster.

But as per the elastic search cross cluster documentation, we need specify the clusters & their seeds.

search:  
remote:  
local\_cluster:  
seeds: 127.0.0.1:9300  
dev\_cluster:  
seeds: 127.0.0.1:9301

My questions here are:

1. How can we specify ELB ( AWS elastic load balance) here as the 93xx ports are not open on these ELB? As the IP address of Elastic search instance will change in our environment, hence we would like to use ELBs name so that the search request sent to remote clusters are distributed & not coupled with Ip addresses.

2. How do I pass the credentials of remote cluster in the seed block? there is no clear documentation whether it is support or not. As I'm using X-Pack on both clusters and changed the default password for elastic user, hence I need to know how to pass the credentials in the seed.

3. How do I search the data in same index name from multiple clusters without specifying cluster-name (specified in the elasticsearch.yml) in the search query...  
I tried below queries and didn't work  
GET /\*:indexname/log/\_search  
GET /\_all:indexname/log/\_search

---

<div class="post-metadata">

**Author:** ![Jayanna\_Hallur](https://avatars.discourse-cdn.com/v4/letter/j/a4c791/32.png) [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\
**Post date:** [June 13, 2017, 5:11pm UTC](https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089/2 "2017-06-13T17:11:36Z")

</div>

Any answers?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 14, 2017, 6:14am UTC](https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089/3 "2017-06-14T06:14:05Z")

</div>

You cannot do 1.  
For 2 you do as per [https://www.elastic.co/guide/en/x-pack/current/cross-cluster-configuring.html](https://www.elastic.co/guide/en/x-pack/current/cross-cluster-configuring.html), then you authenticate the HTTP request, not the cross-cluster request.  
3, you need to do something like this, assuming you are requesting via `local_cluster`;

```auto
GET /dev_cluster:indexname,indexname/log/_search

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 12, 2017, 6:14am UTC](https://discuss.elastic.co/t/cross-cluster-search-using-elbs-of-remote-es-cluster/89089/4 "2017-07-12T06:14:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.