diff --git a/docs/reference/auditbeat/elasticsearch-output.md b/docs/reference/auditbeat/elasticsearch-output.md index 4fd3e15f426c..768c9f25736f 100644 --- a/docs/reference/auditbeat/elasticsearch-output.md +++ b/docs/reference/auditbeat/elasticsearch-output.md @@ -81,6 +81,10 @@ The list of Elasticsearch nodes to connect to. The events are distributed to the When a node is defined as an `IP:PORT`, the *scheme* and *path* are taken from the [`protocol`](#protocol-option) and [`path`](#path-option) config options. :::: +::::{warning} +All configured hosts must belong to the same Elasticsearch cluster; using nodes from different clusters may result in split or inconsistent data. +:::: + ```yaml output.elasticsearch: diff --git a/docs/reference/filebeat/elasticsearch-output.md b/docs/reference/filebeat/elasticsearch-output.md index 413228e5c722..79e71fe2a267 100644 --- a/docs/reference/filebeat/elasticsearch-output.md +++ b/docs/reference/filebeat/elasticsearch-output.md @@ -81,6 +81,10 @@ The list of Elasticsearch nodes to connect to. The events are distributed to the When a node is defined as an `IP:PORT`, the *scheme* and *path* are taken from the [`protocol`](#protocol-option) and [`path`](#path-option) config options. :::: +::::{warning} +All configured hosts must belong to the same Elasticsearch cluster; using nodes from different clusters may result in split or inconsistent data. +:::: + ```yaml output.elasticsearch: diff --git a/docs/reference/heartbeat/elasticsearch-output.md b/docs/reference/heartbeat/elasticsearch-output.md index 8fc46634adfe..79b7832ad00f 100644 --- a/docs/reference/heartbeat/elasticsearch-output.md +++ b/docs/reference/heartbeat/elasticsearch-output.md @@ -81,6 +81,10 @@ The list of Elasticsearch nodes to connect to. The events are distributed to the When a node is defined as an `IP:PORT`, the *scheme* and *path* are taken from the [`protocol`](#protocol-option) and [`path`](#path-option) config options. :::: +::::{warning} +All configured hosts must belong to the same Elasticsearch cluster; using nodes from different clusters may result in split or inconsistent data. +:::: + ```yaml output.elasticsearch: diff --git a/docs/reference/metricbeat/elasticsearch-output.md b/docs/reference/metricbeat/elasticsearch-output.md index 2777d6a8ba44..bd11fb9ee07f 100644 --- a/docs/reference/metricbeat/elasticsearch-output.md +++ b/docs/reference/metricbeat/elasticsearch-output.md @@ -81,6 +81,10 @@ The list of Elasticsearch nodes to connect to. The events are distributed to the When a node is defined as an `IP:PORT`, the *scheme* and *path* are taken from the [`protocol`](#protocol-option) and [`path`](#path-option) config options. :::: +::::{warning} +All configured hosts must belong to the same Elasticsearch cluster; using nodes from different clusters may result in split or inconsistent data. +:::: + ```yaml output.elasticsearch: diff --git a/docs/reference/packetbeat/elasticsearch-output.md b/docs/reference/packetbeat/elasticsearch-output.md index 4ea62fd5dec9..ad29949c70ce 100644 --- a/docs/reference/packetbeat/elasticsearch-output.md +++ b/docs/reference/packetbeat/elasticsearch-output.md @@ -81,6 +81,10 @@ The list of Elasticsearch nodes to connect to. The events are distributed to the When a node is defined as an `IP:PORT`, the *scheme* and *path* are taken from the [`protocol`](#protocol-option) and [`path`](#path-option) config options. :::: +::::{warning} +All configured hosts must belong to the same Elasticsearch cluster; using nodes from different clusters may result in split or inconsistent data. +:::: + ```yaml output.elasticsearch: diff --git a/docs/reference/winlogbeat/elasticsearch-output.md b/docs/reference/winlogbeat/elasticsearch-output.md index c04a296972ce..0dd7940382fc 100644 --- a/docs/reference/winlogbeat/elasticsearch-output.md +++ b/docs/reference/winlogbeat/elasticsearch-output.md @@ -81,6 +81,10 @@ The list of Elasticsearch nodes to connect to. The events are distributed to the When a node is defined as an `IP:PORT`, the *scheme* and *path* are taken from the [`protocol`](#protocol-option) and [`path`](#path-option) config options. :::: +::::{warning} +All configured hosts must belong to the same Elasticsearch cluster; using nodes from different clusters may result in split or inconsistent data. +:::: + ```yaml output.elasticsearch: