# Shipping logs from Logstash to multiple Elasticsearch node in the cluster

**URL:** <https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708>\
**Category:** Elasticsearch\
**Created:** [November 24, 2022, 7:46am UTC](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708 "2022-11-24T07:46:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![chaunguyen.3979](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chaunguyen.3979/32/112153_2.png) [@chaunguyen.3979](https://discuss.elastic.co/u/chaunguyen.3979)\
**Post date:** [November 24, 2022, 7:46am UTC](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708/1 "2022-11-24T07:46:49Z")

</div>

Hello,  
I create a cluster with 3 Elasticsearch nodes, and intend to ship logs from the Logstash to all Elasticsearch nodes simultaneously (Eg: I have cluster with node A - master node, node B and C - data node, and every time I have a new log from Logstash, I want this log is sent to B and C simultaneously). And I stuck in some questions:

1. How could I do this?
2. Should I do that? And if I do this, are there any issues with the performance's cluster?

Thanks for reading.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [November 24, 2022, 8:43am UTC](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708/2 "2022-11-24T08:43:47Z")

</div>

You index into a cluster, not a specific node, so data can be sent to any node and it will be stored in the cluster as a whole, often distributed across the nodes. You should therefore only send the data once to the cluster and the request can go to any node.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 22, 2022, 8:44am UTC](https://discuss.elastic.co/t/shipping-logs-from-logstash-to-multiple-elasticsearch-node-in-the-cluster/319708/3 "2022-12-22T08:44:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.