# Some basic questions regarding ES **URL:** \ **Category:** Elasticsearch\ **Created:** [March 15, 2016, 4:27pm UTC](https://discuss.elastic.co/t/some-basic-questions-regarding-es/44460 "2016-03-15T16:27:41Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![kartikelastic](https://avatars.discourse-cdn.com/v4/letter/k/8dc957/32.png) [@kartikelastic](https://discuss.elastic.co/u/kartikelastic)\ **Post date:** [March 15, 2016, 4:27pm UTC](https://discuss.elastic.co/t/some-basic-questions-regarding-es/44460/1 "2016-03-15T16:27:41Z")
I am trying to learn Elasticsearch and have some questions, please answer if and when you get a chance: The scenario: 3 master nodes 2 for quorum 3 data nodes The questions: Let’s say I need to forward apache httpd logs using logstash forwarder, do I forward from all web servers to one data node or do I distribute them across the data nodes? Are indices created for each log type per data node and are they replicated on the other data nodes? What are shards? (simplistic explanation would suffice). If I use Kibana for visualization, do I connect it to “any one” data node or to “any one” master node? Is it not bad practice to not have the ES nodes on public network? What framework do you recommend for Hadoop/ES integration? I have Hadoop+Hive configured, any starting points would be helpful (I have gone through the [elastic.co](http://elastic.co) doc and am unable to find how to actually send Hive data to ES) Thanks a LOT in advance. Regards, ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 16, 2016, 12:49am UTC](https://discuss.elastic.co/t/some-basic-questions-regarding-es/44460/2 "2016-03-16T00:49:04Z")
> [@kartikelastic](#): > > Let’s say I need to forward apache httpd logs using logstash forwarder Use Filebeat instead, LSF is deprecated. > [@kartikelastic](#): > > Are indices created for each log type per data node and are they replicated on the other data nodes? One index for it all. They are replicated by default > [@kartikelastic](#): > > What are shards? (simplistic explanation would suffice). Basically, partitions of an index to allow distribution. > [@kartikelastic](#): > > If I use Kibana for visualization, do I connect it to “any one” data node or to “any one” master node? Not the masters. > [@kartikelastic](#): > > Is it not bad practice to not have the ES nodes on public network? That's a lot of negatives. Don't expose ES to the internet is the take away, even then make sure it's protected, just like any other datastore. ---
**Author:** ![kartikelastic](https://avatars.discourse-cdn.com/v4/letter/k/8dc957/32.png) [@kartikelastic](https://discuss.elastic.co/u/kartikelastic)\ **Post date:** [March 16, 2016, 1:08am UTC](https://discuss.elastic.co/t/some-basic-questions-regarding-es/44460/3 "2016-03-16T01:08:49Z")
Thank you very much ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 11:08pm UTC](https://discuss.elastic.co/t/some-basic-questions-regarding-es/44460/4 "2017-07-05T23:08:06Z")