# Should Logstash and ES be in different machines in production?

**URL:** <https://discuss.elastic.co/t/should-logstash-and-es-be-in-different-machines-in-production/42251>\
**Category:** Logstash\
**Created:** [February 19, 2016, 2:36pm UTC](https://discuss.elastic.co/t/should-logstash-and-es-be-in-different-machines-in-production/42251 "2016-02-19T14:36:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![taraka16](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@taraka16](https://discuss.elastic.co/u/taraka16)\
**Post date:** [February 19, 2016, 2:36pm UTC](https://discuss.elastic.co/t/should-logstash-and-es-be-in-different-machines-in-production/42251/1 "2016-02-19T14:36:00Z")

</div>

Should I have elasticsearch and logstash on different machines when deploying the ELK stack in production (as I've read that somewhere in the internet)? or can they be installed on the same server with the following logstash output:

```
output{
   elasticsearch {host => "localhost"}
 }
```

---

<div class="post-metadata">

**Author:** ![Drew\_Town](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/drew_town/32/44829_2.png) [@Drew\_Town](https://discuss.elastic.co/u/Drew_Town)\
**Post date:** [February 21, 2016, 3:56pm UTC](https://discuss.elastic.co/t/should-logstash-and-es-be-in-different-machines-in-production/42251/2 "2016-02-21T15:56:38Z")

</div>

There is no technical reason they couldn't be installed on the same machine. Performance is another angle though. We separated off Logstash from the ES cluster shortly after going into production as they were constantly competing for resources as we have a very index heavy cluster.

---

<div class="post-metadata">

**Author:** ![taraka16](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@taraka16](https://discuss.elastic.co/u/taraka16)\
**Post date:** [February 23, 2016, 1:05pm UTC](https://discuss.elastic.co/t/should-logstash-and-es-be-in-different-machines-in-production/42251/3 "2016-02-23T13:05:28Z")

</div>

@Drew_Town Thanks for the clarifying!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:10am UTC](https://discuss.elastic.co/t/should-logstash-and-es-be-in-different-machines-in-production/42251/4 "2017-07-06T05:10:08Z")

</div>