# Do i need Ingest Node for Logstash?

**URL:** <https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892>\
**Category:** Elasticsearch\
**Created:** [May 3, 2020, 6:42pm UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892 "2020-05-03T18:42:31Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![AtyNewman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atynewman/32/63720_2.png) [@AtyNewman](https://discuss.elastic.co/u/AtyNewman)\
**Post date:** [May 3, 2020, 6:42pm UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892/1 "2020-05-03T18:42:31Z")

</div>

Hello,

I have a question about Elasticsearch:

Do i need a dedicated ingest node in Elasticsearch if i am using Logstash to receive and create data to the database, and i have heavy queries?

I have only one machine, and i am running multiple instances of Elasticsearch as a Cluster there...

Thank you for the help.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 4, 2020, 12:42am UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892/2 "2020-05-04T00:42:00Z")

</div>

> [@AtyNewman](#):
>
> Do i need a dedicated ingest node in Elasticsearch if i am using Logstash to receive and create data to the database, and i have heavy queries?

No.

> [@AtyNewman](#):
>
> I have only one machine, and i am running multiple instances of Elasticsearch

Unless you have more than 64gb of RAM why are you doing that?

---

<div class="post-metadata">

**Author:** ![AtyNewman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atynewman/32/63720_2.png) [@AtyNewman](https://discuss.elastic.co/u/AtyNewman)\
**Post date:** [May 4, 2020, 7:04am UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892/3 "2020-05-04T07:04:03Z")

</div>

> [@dadoonet](#):
>
> Unless you have more than 64gb of RAM why are you doing that?

I had some data loss in incoming data when i applied queries in Elasticsearch. This is why i tried to create one node for incoming data and one node for the queries, in order to separate somehow.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 4, 2020, 8:31am UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892/4 "2020-05-04T08:31:06Z")

</div>

So you have a "big" data node and a small coordinating only node?

---

<div class="post-metadata">

**Author:** ![AtyNewman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atynewman/32/63720_2.png) [@AtyNewman](https://discuss.elastic.co/u/AtyNewman)\
**Post date:** [May 4, 2020, 8:32am UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892/5 "2020-05-04T08:32:03Z")

</div>

Yes exactly.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 4, 2020, 9:44am UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892/6 "2020-05-04T09:44:21Z")

</div>

Fair enough.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 1, 2020, 9:44am UTC](https://discuss.elastic.co/t/do-i-need-ingest-node-for-logstash/230892/7 "2020-06-01T09:44:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.