# Logstash ingest & Logstash Indexer

**URL:** <https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878>\
**Category:** Logstash\
**Created:** [March 7, 2018, 12:14pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878 "2018-03-07T12:14:29Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eswar\_Kumar\_Musiboin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eswar_kumar_musiboin/32/28623_2.png) [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\
**Post date:** [March 7, 2018, 12:14pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878/1 "2018-03-07T12:14:29Z")

</div>

How to configure Logstash ingest nodes and logstash index nodes separately ? Heard logstash index and ingesters some where but no traces in [elastic.co](http://elastic.co) documentations. Correct me if invalid.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 7, 2018, 1:09pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878/2 "2018-03-07T13:09:51Z")

</div>

I don't understand your question. What are you trying to do? What do you mean by "ingest node" and "index node"?

---

<div class="post-metadata">

**Author:** ![Eswar\_Kumar\_Musiboin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eswar_kumar_musiboin/32/28623_2.png) [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\
**Post date:** [March 7, 2018, 1:13pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878/3 "2018-03-07T13:13:54Z")

</div>

how to make configurations to send logs from filebeat to ingest node and from ingest node to index node. If i am not wrong I heard ingest node will take input from any input sources, and index node do document indexing at elasticsearch. More over please provide what is index node and ingest node difference as i didnt get any information in elastic documents.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 7, 2018, 1:34pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878/4 "2018-03-07T13:34:13Z")

</div>

While it's possible to use multiple Logstash instances that have different roles it's not mandatory. I suggest you keep it simple. Get things working first, and if it later on makes sense to use multiple instances then you can worry about that then.

---

<div class="post-metadata">

**Author:** ![Eswar\_Kumar\_Musiboin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eswar_kumar_musiboin/32/28623_2.png) [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\
**Post date:** [March 7, 2018, 1:56pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878/5 "2018-03-07T13:56:03Z")

</div>

i am good handling filebeat logs to logstash where we have parsing confs and sending them to elasticsearch. but we are planning to have multiple logstash nodes which can perform different roles individually namely few nodes for ingest and few for index purpose. will be glad if you can share any documents atleast.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 4, 2018, 1:56pm UTC](https://discuss.elastic.co/t/logstash-ingest-logstash-indexer/122878/6 "2018-04-04T13:56:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.