The hosts entry for the elasticsearch output can take an array of values, meaning it will automatically load balance between each of the entries you define.
Point your logstash output to the three data nodes in an array and you should be good to go.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.