# Load Balancing Elasticsearch Nodes

**URL:** <https://discuss.elastic.co/t/load-balancing-elasticsearch-nodes/244933>\
**Category:** Beats\
**Tags:** filebeat, auditbeat\
**Created:** [August 13, 2020, 6:21pm UTC](https://discuss.elastic.co/t/load-balancing-elasticsearch-nodes/244933 "2020-08-13T18:21:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jijo.john](https://avatars.discourse-cdn.com/v4/letter/j/b3f665/32.png) [@jijo.john](https://discuss.elastic.co/u/jijo.john)\
**Post date:** [August 13, 2020, 6:21pm UTC](https://discuss.elastic.co/t/load-balancing-elasticsearch-nodes/244933/1 "2020-08-13T18:21:21Z")

</div>

Hi There,

We are new to elasticsearch and running a POC and nodes are hosted as EC2 instance in aws. We have a query for elasticsearch node redundancy. How do we configure multiple elasticsearch nodes in auditbeat/filebeat to achieve redundancy during a node failure.

We have 1500 servers which needs audit/file beats to be configured to point to elasticsearch nodes. In audit/filebeat config can we point to a ALB/NLB so that we can add multiple nodes under ALB/NLB when required and no config change is required on auditbeat/filebeat config every time. Please help

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [August 13, 2020, 6:41pm UTC](https://discuss.elastic.co/t/load-balancing-elasticsearch-nodes/244933/2 "2020-08-13T18:41:04Z")

</div>

I'm not familiar with ALB/NLB but it sounds like these are load balancers fronting your Elasticsearch nodes. If so, as long as these load balancers are configured to talk to the Elasticsearch nodes' HTTP ports (the one which is 9200 by default), then yes, you can simply set `output.elasticsearch.hosts` in your Auditbeat/Filebeat configuration to point to the ALB/NLB. Depending on the load balancing policy, the HTTP traffic coming from Beats will be routed to various Elasticsearch nodes.

---

<div class="post-metadata">

**Author:** ![jijo.john](https://avatars.discourse-cdn.com/v4/letter/j/b3f665/32.png) [@jijo.john](https://discuss.elastic.co/u/jijo.john)\
**Post date:** [August 14, 2020, 9:15am UTC](https://discuss.elastic.co/t/load-balancing-elasticsearch-nodes/244933/3 "2020-08-14T09:15:48Z")

</div>

Thanks Shaunak. We will check the NLB option and confirm here

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 11, 2020, 11:15am UTC](https://discuss.elastic.co/t/load-balancing-elasticsearch-nodes/244933/4 "2020-09-11T11:15:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
