Documentation (Collecting Elasticsearch monitoring data with Metricbeat | Elasticsearch Guide [7.13] | Elastic) says: "Ideally install a single Metricbeat instance configured with scope: cluster and configure hosts to point to an endpoint (e.g. a load-balancing proxy) which directs requests to the master-ineligible nodes in the cluster."
But if i have only 1 metricbeat configured, there is single point of failure, and if i have metricbeat on the other master-eligible nodes as well with scope: cluster, they are collecting the same data and producing triple the amount of logs.
What is the best configuration for a large production cluster? I tried to have metricbeat to each node with scope: node, but it's not even working well (data comes from time to time on big chunks).