# Which node(s) in my ES cluster do I point Logstash to? **URL:** \ **Category:** Logstash\ **Created:** [May 21, 2016, 3:20am UTC](https://discuss.elastic.co/t/which-node-s-in-my-es-cluster-do-i-point-logstash-to/50609 "2016-05-21T03:20:20Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![nateuni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nateuni/32/8512_2.png) [@nateuni](https://discuss.elastic.co/u/nateuni)\ **Post date:** [May 21, 2016, 3:20am UTC](https://discuss.elastic.co/t/which-node-s-in-my-es-cluster-do-i-point-logstash-to/50609/1 "2016-05-21T03:20:20Z")
I have ES 4 servers running as such: 1. Client Node (also hosting Kibana) 2. Default setting (By default a node is both a master-eligible node and a data node) 3. Default setting 4. Default setting In Logstash's output setting for Elasticsearch, do I put the single IP of the client node? Or an array with all 4 nodes? ---
**Author:** ![anhlqn](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anhlqn/32/5454_2.png) [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Post date:** [May 21, 2016, 4:37am UTC](https://discuss.elastic.co/t/which-node-s-in-my-es-cluster-do-i-point-logstash-to/50609/2 "2016-05-21T04:37:23Z")
I think it depends on your indexing rate. If you index like 50 GB a day, then an array of node 2,3,4 or just the client node should be fine. Use Marvel to monitor node health and have a dedicated client node for indexing if you see any slowness on indexing node(s). If you have more RAM per servers, you can also run multiple ES instances per server. A cluster is more stable if you have 3 dedicated master instances. In my case I have 3 master instances with heap size 4 GB each. I even use a master node with 4 GB heap size to serve Kibana requests without any issues so far. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 4:56am UTC](https://discuss.elastic.co/t/which-node-s-in-my-es-cluster-do-i-point-logstash-to/50609/3 "2017-07-06T04:56:49Z")