# Logstash and Kibana as coordinating nodes - Does it makes senses?

**URL:** <https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045>\
**Category:** Elasticsearch\
**Created:** [August 14, 2020, 4:44pm UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045 "2020-08-14T16:44:20Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Travis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travis/32/54079_2.png) [@Travis](https://discuss.elastic.co/u/Travis)\
**Post date:** [August 14, 2020, 4:44pm UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/1 "2020-08-14T16:44:20Z")

</div>

Hello !

In the following setup, does it makes sense to configure **Logstash-Central** and **Kibana** as coordinating nodes ? :

Syslog/beats =\> Logstash-satellite =\> Kafka \<= Logstash-central =\> Elasticsearch \<= Kibana

If this is the case, can you please confirm that in Kibana/Logstash settings, I have to add all the coordinating nodes and not only local node ("[https://127.0.0.1:9200](https://127.0.0.1:9200)")

Thanks !

---

<div class="post-metadata">

**Author:** ![Travis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travis/32/54079_2.png) [@Travis](https://discuss.elastic.co/u/Travis)\
**Post date:** [August 17, 2020, 2:47pm UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/2 "2020-08-17T14:47:35Z")

</div>

Anybody ? 😋

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 17, 2020, 11:36pm UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/3 "2020-08-17T23:36:28Z")

</div>

Yes that makes sense.

---

<div class="post-metadata">

**Author:** ![Travis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travis/32/54079_2.png) [@Travis](https://discuss.elastic.co/u/Travis)\
**Post date:** [August 17, 2020, 11:59pm UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/4 "2020-08-17T23:59:54Z")

</div>

Thanks @warkolm. Could you explain quickly why ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 18, 2020, 12:01am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/5 "2020-08-18T00:01:52Z")

</div>

Co-ordinating nodes are basically load balancers into the existing cluster, they can also take away some of the load from other nodes as well (during the query parsing process), which means your data nodes have more resources.

---

<div class="post-metadata">

**Author:** ![Travis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travis/32/54079_2.png) [@Travis](https://discuss.elastic.co/u/Travis)\
**Post date:** [August 18, 2020, 8:19am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/6 "2020-08-18T08:19:21Z")

</div>

OK great. So I have to point Kibana to all coordinating nodes or only only one is enough ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 18, 2020, 8:19am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/7 "2020-08-18T08:19:48Z")

</div>

Unless you want to run multiple instances of Kibana, just keep it to the one.

---

<div class="post-metadata">

**Author:** ![Travis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travis/32/54079_2.png) [@Travis](https://discuss.elastic.co/u/Travis)\
**Post date:** [August 18, 2020, 8:46am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/8 "2020-08-18T08:46:43Z")

</div>

Just to be sure, I speak about this settings in Kibana :

# The URLs of the Elasticsearch instances to use for all your queries.

elasticsearch.hosts: ["[https://X.X.X.X:9200](https://X.X.X.X:9200)"]

So even if I have 2 or more coordinating nodes, this is not necessary to add them all in this setting ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 18, 2020, 9:36am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/9 "2020-08-18T09:36:22Z")

</div>

If the local Elasticsearch node is down, it's likely to be something that'll also impact Kibana (ie at the host level), so probably not.

---

<div class="post-metadata">

**Author:** ![Travis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travis/32/54079_2.png) [@Travis](https://discuss.elastic.co/u/Travis)\
**Post date:** [August 18, 2020, 10:41am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/10 "2020-08-18T10:41:00Z")

</div>

Ok thank you ! 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 15, 2020, 10:41am UTC](https://discuss.elastic.co/t/logstash-and-kibana-as-coordinating-nodes-does-it-makes-senses/245045/11 "2020-09-15T10:41:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.