# Which node ip address should I specify in Multi-Node elasticsearch cluster to store data into an elasticsearch index? **URL:** \ **Category:** Elasticsearch\ **Created:** [May 25, 2021, 3:06pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962 "2021-05-25T15:06:46Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Husnain](https://avatars.discourse-cdn.com/v4/letter/h/a9a28c/32.png) [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Post date:** [May 25, 2021, 3:06pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962/1 "2021-05-25T15:06:46Z")
Hii.I am creating a Multi-Node Elasticsearch Cluster.I will collect logs from different server's using filebeat and store them into an elasticsearch index.I am little bit confuse that which elasticsearch node ip address should I specify in "filebeat.yml" to send data to elasticsearch.Should I specify the ip address of master node or ip address of data node.This is my setup:- 1.) 3 Master Nodes of elasticsearch 2.) 2 Data nodes of elasticsearch 3.) 1 Filebeat Instance 4.) 1 Kibana instance ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [May 25, 2021, 10:41pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962/2 "2021-05-25T22:41:02Z")
Are they dedicated masters? If so use the data nodes. Filebeat will accept multiple entries in the output field. ---
**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Post date:** [May 26, 2021, 12:59am UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962/3 "2021-05-26T00:59:59Z")
The events are distributed to these nodes in round robin order. If one node becomes unreachable, the event is automatically sent to another node. ---
**Author:** ![Husnain](https://avatars.discourse-cdn.com/v4/letter/h/a9a28c/32.png) [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Post date:** [May 26, 2021, 12:57pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962/4 "2021-05-26T12:57:56Z")
Hii @warkolm .Thanks for your reply. Yes they are dedicated master node's.Ok.I will specify ip address of data node in filbeat.yml file. ---
**Author:** ![Husnain](https://avatars.discourse-cdn.com/v4/letter/h/a9a28c/32.png) [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Post date:** [May 26, 2021, 12:59pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962/5 "2021-05-26T12:59:55Z")
Hii @rugenl.Thanks for your reply.Thanks for sharing this knowledge with me ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 23, 2021, 1:00pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962/6 "2021-06-23T13:00:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.