Multi-Tier Architecture, best configuration for Elasticsearch.output

I hope you are having a good day,

I'm trying to migrate to a multi-tier architecture, and I'm confused what should the Elasticsearch.output configuration in beats and Elastic Agent be:

  • Should I configure beats to output only to hot data nodes ?
  • Or should I use all nodes for better ingestion and wait for allocation to move indices to hot nodes ?

If you have hot nodes then that is likely where the data is being indexed, and not on any other nodes, so use them.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.