# Elastic cluster is not realtime when displaying data for some hosts

**URL:** <https://discuss.elastic.co/t/elastic-cluster-is-not-realtime-when-displaying-data-for-some-hosts/36319>\
**Category:** Elasticsearch\
**Created:** [December 3, 2015, 8:30pm UTC](https://discuss.elastic.co/t/elastic-cluster-is-not-realtime-when-displaying-data-for-some-hosts/36319 "2015-12-03T20:30:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![MikeC](https://avatars.discourse-cdn.com/v4/letter/m/977dab/32.png) [@MikeC](https://discuss.elastic.co/u/MikeC)\
**Post date:** [December 3, 2015, 8:30pm UTC](https://discuss.elastic.co/t/elastic-cluster-is-not-realtime-when-displaying-data-for-some-hosts/36319/1 "2015-12-03T20:30:59Z")

</div>

(previous question [here](https://discuss.elastic.co/t/kibana-is-late-showing-results-from-some-hosts/36106))

Hi,

i have an elastic 2.0 cluster with 3 data nodes `m003/4/5`, 1 master `m004` and 1 dummy node `m006`.  
The server with the dummy node (not data, not master) has a kibana running.  
Behind all that, i've got a logstash server running that distributes events with this configuration

```auto
elasticsearch {
    hosts => ['m003', 'm004', 'm005']
}

```

The issue that im seeing is that my kibana graphs are not real time any more for all hosts.  
For a group of hosts, there is a 2-3 min delay and for another group the data are update real-time.

I've used [this](https://www.elastic.co/guide/en/kibana/current/production.html) guild for my setup.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 5, 2015, 12:20am UTC](https://discuss.elastic.co/t/elastic-cluster-is-not-realtime-when-displaying-data-for-some-hosts/36319/2 "2015-12-05T00:20:18Z")

</div>

KB reads from ES, and ES can only display what it has.  
Are you _sure_ that the data exists in ES when you see this gap?

> [@MikeC](#):
>
> dummy node

Client node, not dummy 🙂

---

<div class="post-metadata">

**Author:** ![MikeC](https://avatars.discourse-cdn.com/v4/letter/m/977dab/32.png) [@MikeC](https://discuss.elastic.co/u/MikeC)\
**Post date:** [December 7, 2015, 10:22am UTC](https://discuss.elastic.co/t/elastic-cluster-is-not-realtime-when-displaying-data-for-some-hosts/36319/3 "2015-12-07T10:22:20Z")

</div>

thanks for the correction, im still getting used to the terminology.

This might be a sneaky firewall issue from the IT department - Ill post an update when i rule that out (or confirm it).

Cheers

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 11:33pm UTC](https://discuss.elastic.co/t/elastic-cluster-is-not-realtime-when-displaying-data-for-some-hosts/36319/4 "2017-07-05T23:33:04Z")

</div>