When inserting data into elasticsearch with Logstash (Where logstash is doing the parsing), is it better to:
- Point all incoming index requests to any node (i.e. doesn't really matter what node, as long as it gets to the right cluster
- Point all incoming index requests to any master node (same as above, but only master nodes, not data nodes)
- Point all incoming index requests to all nodes (Logstash's Elasticsearch output plugin can take an array of ES hosts - so, this would be including them all)
- Something else?