# Transport client?

**URL:** <https://discuss.elastic.co/t/transport-client/75000>\
**Category:** Elasticsearch\
**Created:** [February 14, 2017, 9:14am UTC](https://discuss.elastic.co/t/transport-client/75000 "2017-02-14T09:14:32Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![pierB](https://avatars.discourse-cdn.com/v4/letter/p/5fc32e/32.png) [@pierB](https://discuss.elastic.co/u/pierB)\
**Post date:** [February 14, 2017, 9:14am UTC](https://discuss.elastic.co/t/transport-client/75000/1 "2017-02-14T09:14:32Z")

</div>

Hi,

ES newbie here so please bear with my noob question.

I set a graylog stack, using ES / mongo /graylog server suite, I am using ES2.4 as this is the latest version supported by graylog-server.

After setting up my ES node (I only have one node on the the very same server that holds graylog and mongo), I can see the following :

> {  
> "cluster\_name" : "log\_server\_graylog",  
> "nodes" : {  
> "flyaLaEiSa-W2EZ3b3K41w" : {  
> "timestamp" : 1487063374759,  
> "name" : "log",  
> "transport\_address" : "127.0.0.1:9300",  
> "host" : "127.0.0.1",  
> "ip" : ["127.0.0.1:9300", "NONE"],  
> "process" : {  
> "timestamp" : 1487063374759,  
> "open\_file\_descriptors" : 577,  
> "max\_file\_descriptors" : 65536,  
> "cpu" : {  
> "percent" : 0,  
> "total\_in\_millis" : 977580  
> },  
> "mem" : {  
> "total\_virtual\_in\_bytes" : 48561156096  
> }  
> }  
> },  
> "1Ee5IXtRTLC6nyCgloOaug" : {  
> "timestamp" : 1487063374760,  
> "name" : "graylog-27274b66-3bbd-4975-99ee-1ee3d692c522",  
> "transport\_address" : "127.0.0.1:9350",  
> "host" : "127.0.0.1",  
> "ip" : ["127.0.0.1:9350", "NONE"],  
> "attributes" : {  
> "client" : "true",  
> "data" : "false",  
> "master" : "false"  
> },  
> "process" : {  
> "timestamp" : 1487063374760,  
> "open\_file\_descriptors" : 519,  
> "max\_file\_descriptors" : 64000,  
> "cpu" : {  
> "percent" : 0,  
> "total\_in\_millis" : 1001200  
> },  
> "mem" : {  
> "total\_virtual\_in\_bytes" : 15875788800  
> }  
> }  
> }  
> }  
> }

I was kind of surprised to see that there are 2 nodes as I am did not set anything like that, someone on the ES irc told me that it may be because of using a transport client which appears as a second node. But I did not setup anything like that.

Do you confirm that my second node actually is a transport client ?

Is it some kind of problem ?

If yes how can I set up my ES server in order to see only one node ?

Again, I am a ES newbie, I did some research about transport client but I could not understand where this second comes from...

Here my very simple config file :

> cluster.name: log\_server\_graylog  
> node.name: ${HOSTNAME}  
> path.data: /elq/elasticsearch/data  
> path.logs: /elq/elasticsearch/log  
> bootstrap.memory\_lock: true  
> network.host: 127.0.0.1  
> action.destructive\_requires\_name: true

Thanks for your enlighment 🙂

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 14, 2017, 9:31am UTC](https://discuss.elastic.co/t/transport-client/75000/2 "2017-02-14T09:31:33Z")

</div>

What does `_cat/nodes` show?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [February 14, 2017, 9:34am UTC](https://discuss.elastic.co/t/transport-client/75000/3 "2017-02-14T09:34:23Z")

</div>

Based on the configuration, it looks like Graylog sets up one master/data node and an additional client node. Clients using the transport protocol do not join the cluster as nodes.

---

<div class="post-metadata">

**Author:** ![pierB](https://avatars.discourse-cdn.com/v4/letter/p/5fc32e/32.png) [@pierB](https://discuss.elastic.co/u/pierB)\
**Post date:** [February 14, 2017, 9:45am UTC](https://discuss.elastic.co/t/transport-client/75000/4 "2017-02-14T09:45:27Z")

</div>

Hi Christian\_Dahlqvist,

Thanks for your answer although I dot not understand it fully (this is an understatement!) :

" Clients using the transport protocol do not join the cluster as nodes"

Is this a problem or not ?

I understand this is caused by the graylog client, so I guess this is a normal behaviour, but from the ES point of view is this problematic ?

Thanks again for your time

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [February 14, 2017, 9:47am UTC](https://discuss.elastic.co/t/transport-client/75000/5 "2017-02-14T09:47:55Z")

</div>

You appear to have two nodes, so what you are seeing is normal. I don't think a client node is really needed for a cluster this size, but even though the client node may not be required, it should not be problematic.

---

<div class="post-metadata">

**Author:** ![pierB](https://avatars.discourse-cdn.com/v4/letter/p/5fc32e/32.png) [@pierB](https://discuss.elastic.co/u/pierB)\
**Post date:** [February 14, 2017, 9:57am UTC](https://discuss.elastic.co/t/transport-client/75000/6 "2017-02-14T09:57:32Z")

</div>

OK, good to hear that 🙂

So I am keeping the config as is.

When you're saying : " I don't think a client node is really needed for a cluster this size" do you mean the data set size ? Because it is going to increase a lot more in the future (I am now sending only syslog to ES, but soon the very verbose Home app is giong to be sent over there...)

Does a client node is more accurate for large data set ?

Thanks again...

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [February 14, 2017, 10:44am UTC](https://discuss.elastic.co/t/transport-client/75000/7 "2017-02-14T10:44:54Z")

</div>

I do not know Graylog, so do not know why they apparently are using a client node. For small clusters dedicated client nodes are generally not required.

---

<div class="post-metadata">

**Author:** ![pierB](https://avatars.discourse-cdn.com/v4/letter/p/5fc32e/32.png) [@pierB](https://discuss.elastic.co/u/pierB)\
**Post date:** [February 14, 2017, 10:46am UTC](https://discuss.elastic.co/t/transport-client/75000/8 "2017-02-14T10:46:21Z")

</div>

OK, thanks I'll ask @graylog for more info regarding this question.

You've been very helpful and quick to response, thank you for that.

Pier

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 14, 2017, 10:46am UTC](https://discuss.elastic.co/t/transport-client/75000/9 "2017-03-14T10:46:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
