Logstash Elasticsearch output - Recommended node types for "hosts"

Elastic Stack Logstash
1

Hi,

I'm currently setting up Logstash and I'm wondering which Elasticsearch nodes I should add into the "hosts" array in the elasticsearch output configuration.

elasticsearch {
  hosts => ...
  ...

In my environment I have a "Hot/Warm" architecture with the following node types:

3x Master Nodes
6x Data Nodes (3 Hot / 3 Warm)
3x Coordinator only nodes

From the documentation I can see it is not advisable to send to the "Master" nodes, however I am unsure which remaining hosts should be added to the hosts array inside of the output configuration file. My gut feelings would be that I should add the "Hot" data nodes only?

As always, any advice or suggestions welcome :slight_smile:

2

Yes, listing just the hot nodes sounds reasonable.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.