Multi-Tier Architecture, best configuration for Elasticsearch.output

[A_Abdellah (Abdellah Aissat)]

Hello,
I hope you are having a good day,

I'm trying to migrate to a multi-tier architecture, and I'm confused what should the Elasticsearch.output configuration in beats and Elastic Agent be:

• Should I configure beats to output only to hot data nodes ?
• Or should I use all nodes for better ingestion and wait for allocation to move indices to hot nodes ?

[warkolm (Mark Walkom)]

If you have hot nodes then that is likely where the data is being indexed, and not on any other nodes, so use them.