Multi-Tier Architecture, best configuration for Elasticsearch.output

Elastic Stack Elasticsearch
,
1

Hello,
I hope you are having a good day,

I'm trying to migrate to a multi-tier architecture, and I'm confused what should the Elasticsearch.output configuration in beats and Elastic Agent be:

  • Should I configure beats to output only to hot data nodes ?
  • Or should I use all nodes for better ingestion and wait for allocation to move indices to hot nodes ?
2

If you have hot nodes then that is likely where the data is being indexed, and not on any other nodes, so use them.