# Develop ELK Cluster

**URL:** <https://discuss.elastic.co/t/develop-elk-cluster/283004>\
**Category:** Elasticsearch\
**Created:** [September 1, 2021, 7:57am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004 "2021-09-01T07:57:06Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![psanggabuana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/psanggabuana/32/51625_2.png) [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Post date:** [September 1, 2021, 7:57am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/1 "2021-09-01T07:57:06Z")

</div>

Hi All,

I have plan to create Elastic Cluster.  
I have prepared 3 elastic servers and SAN Storage.

I will create cluster which the three nodes.  
I need insight to join SAN Storage to the cluster.

How to join the SAN Storage to the cluster, only attach to one node or separate the Storage to 3 Nodes?

Thank you

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 1, 2021, 10:21pm UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/2 "2021-09-01T22:21:00Z")

</div>

You'd be better off spreading storage across all 3 nodes.

---

<div class="post-metadata">

**Author:** ![psanggabuana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/psanggabuana/32/51625_2.png) [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Post date:** [September 2, 2021, 7:35am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/3 "2021-09-02T07:35:14Z")

</div>

Hi @Warklom,

Thank you for your advise.

Maybe you can give me advise how to migrate from one node to cluster.  
Now, the one node is running and it have many index.  
or I can join the existing node to new cluster.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2021, 7:39am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/4 "2021-09-02T07:39:28Z")

</div>

You can add new nodes to the existing one, yes.  
Check out [Add and remove nodes in your cluster | Elasticsearch Guide [7.14] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/add-elasticsearch-nodes.html)

---

<div class="post-metadata">

**Author:** ![psanggabuana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/psanggabuana/32/51625_2.png) [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Post date:** [September 2, 2021, 7:58am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/5 "2021-09-02T07:58:43Z")

</div>

Thank you, I will check this.

Maybe you can give me advise how to create cluster when I have 3 server.

For now, I think to create 1 master node and 2 data node which every node have same specification, 8 Core and 32 RAM. But for storage capacity is different maybe master 50 Gb and Data 1 Tb.

Thank You

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2021, 8:02am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/6 "2021-09-02T08:02:37Z")

</div>

A single master is not a good idea as it can potentially lead to split brain.

You are better off making all 3 the same.

---

<div class="post-metadata">

**Author:** ![psanggabuana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/psanggabuana/32/51625_2.png) [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Post date:** [September 2, 2021, 8:44am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/7 "2021-09-02T08:44:35Z")

</div>

is it cluster which has 3 nodes with same role (Master and Data) and same storage size?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2021, 10:58am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/8 "2021-09-02T10:58:39Z")

</div>

Correct.

---

<div class="post-metadata">

**Author:** ![psanggabuana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/psanggabuana/32/51625_2.png) [@psanggabuana](https://discuss.elastic.co/u/psanggabuana)\
**Post date:** [September 2, 2021, 11:21am UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/9 "2021-09-02T11:21:16Z")

</div>

Do you have tutorial for this?  
Because I'm confused how to set master roles to 3 node?

I suggest like this:

Node.name: elastic-stack-1  
node.master: true  
node.data: true  
discovery.seed\_hosts: ["elastic-stack-1", "elastic-stack-2", "elastic-stack-3"]

node.name: elastic-stack-2  
node.master: true  
node.data: true  
discovery.seed\_hosts: ["elastic-stack-1", "elastic-stack-2", "elastic-stack-3"]

node.name: elastic-stack-3  
node.master: true  
node.data: true  
discovery.seed\_hosts: ["elastic-stack-1", "elastic-stack-2", "elastic-stack-3"]

is it true?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2021, 10:21pm UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/10 "2021-09-02T22:21:05Z")

</div>

I put in a link for that above.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 30, 2021, 10:21pm UTC](https://discuss.elastic.co/t/develop-elk-cluster/283004/11 "2021-09-30T22:21:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
