deployment/roles/metron_streaming/templates/config/elasticsearch.global.json

{
  "es.clustername": "{{ elasticsearch_cluster_name }}",
  "es.ip": "{{ groups.search[0] }}",
  "es.port": "{{ elasticsearch_transport_port }}",
  "es.date.format": "yyyy.MM.dd.HH"
}