# ELK target cluster and redactions

**URL:** <https://discuss.elastic.co/t/elk-target-cluster-and-redactions/244189>\
**Category:** Elasticsearch\
**Created:** [August 7, 2020, 2:49pm UTC](https://discuss.elastic.co/t/elk-target-cluster-and-redactions/244189 "2020-08-07T14:49:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![griffer98](https://avatars.discourse-cdn.com/v4/letter/g/e8c25b/32.png) [@griffer98](https://discuss.elastic.co/u/griffer98)\
**Post date:** [August 7, 2020, 2:49pm UTC](https://discuss.elastic.co/t/elk-target-cluster-and-redactions/244189/1 "2020-08-07T14:49:31Z")

</div>

I am planning on having multiple clusters and some files that go through the stack will need ip redactions and so on. What I want to do is have some way for logstash to determine, based on certain requirements, which cluster to send the output to and determine weather or not it needs any redactions. Is there a way through some config file or external file of some sorts to accomplish this?

---

<div class="post-metadata">

**Author:** ![Steve\_Mushero](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steve_mushero/32/22441_2.png) [@Steve\_Mushero](https://discuss.elastic.co/u/Steve_Mushero)\
**Post date:** [August 8, 2020, 5:25am UTC](https://discuss.elastic.co/t/elk-target-cluster-and-redactions/244189/2 "2020-08-08T05:25:54Z")

</div>

Is this better in the Logstash topic/area of this Forum? This is the Elasticsearch part 😉

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 5, 2020, 5:25am UTC](https://discuss.elastic.co/t/elk-target-cluster-and-redactions/244189/3 "2020-09-05T05:25:57Z")

</div>

Closed on September 5, 2020, 5:25am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.