# Need to send index to 2 ES from Logstash

**URL:** <https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368>\
**Category:** Logstash\
**Created:** [February 21, 2019, 10:01am UTC](https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368 "2019-02-21T10:01:13Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Loudone](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/loudone/32/33365_2.png) [@Loudone](https://discuss.elastic.co/u/Loudone)\
**Post date:** [February 21, 2019, 10:01am UTC](https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368/1 "2019-02-21T10:01:13Z")

</div>

Hello All,

I'm currently trying to send index from logstash to 2 Elasticsearch cluster like below:

 ![Cluster%20exemple](https://us1.discourse-cdn.com/elastic/original/3X/3/0/303582d8e4e5b2fc476d5526cc31e450cff9d4ad.png)

the problem is, in output logstash's section, it's possible to set in Hosts two ES cluster, but in loadbalance mode.

So, my first question is : is it possible to set two HOSTS line in the logstash's output section?

My second question is: if not for the 1st question, is it possible to make rules with tags for set two logstash's output?

Thank's for your help

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [February 21, 2019, 10:06am UTC](https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368/2 "2019-02-21T10:06:53Z")

</div>

To send to two different clusters you need to setup two separate Elasticsearch outputs.

---

<div class="post-metadata">

**Author:** ![Loudone](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/loudone/32/33365_2.png) [@Loudone](https://discuss.elastic.co/u/Loudone)\
**Post date:** [February 21, 2019, 10:21am UTC](https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368/3 "2019-02-21T10:21:25Z")

</div>

First of all, Many thanks for your feed back Christian.

Do you mean I can do that for example:

> output {  
> if "foo\_1" in [tags] {  
> elasticsearch {  
> hosts =\> ["ES1"]  
> index =\> "foo\_1-%{+YYYY.MM.dd}"  
> }  
> }  
> else if "foo\_2" in [tags] {  
> elasticsearch {  
> hosts =\> ["ES1"]  
> index =\> "foo\_2-%{+YYYY.MM.dd}"  
> }  
> }  
> else {  
> elasticsearch {  
> hosts =\> ["ES1"]  
> index =\> "other\_foo-%{+YYYY.MM.dd}"  
> }  
> }  
> }  
> output {  
> if "foo\_1" in [tags] {  
> elasticsearch {  
> hosts =\> ["ES2"]  
> index =\> "foo\_1-%{+YYYY.MM.dd}"  
> }  
> }  
> else if "foo\_2" in [tags] {  
> elasticsearch {  
> hosts =\> ["ES2"]  
> index =\> "foo\_2-%{+YYYY.MM.dd}"  
> }  
> }  
> else {  
> elasticsearch {  
> hosts =\> ["ES2"]  
> index =\> "other\_foo-%{+YYYY.MM.dd}"  
> }  
> }  
> }

Thank you

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [February 21, 2019, 10:22am UTC](https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368/4 "2019-02-21T10:22:48Z")

</div>

Yes, but you can put it all within a single `output` block.

---

<div class="post-metadata">

**Author:** ![Loudone](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/loudone/32/33365_2.png) [@Loudone](https://discuss.elastic.co/u/Loudone)\
**Post date:** [February 21, 2019, 10:23am UTC](https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368/5 "2019-02-21T10:23:33Z")

</div>

Ok Great!! Thank you Christian.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 21, 2019, 10:32am UTC](https://discuss.elastic.co/t/need-to-send-index-to-2-es-from-logstash/169368/6 "2019-03-21T10:32:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.