Hi,
I've set up a 3 nodes elasticsearch cluster.
My cluster seems healthy. 
{
"cluster_name" : "pprd-log",
"status" : "green",
"timed_out" : false,
"number_of_nodes" : 3,
"number_of_data_nodes" : 2,
"active_primary_shards" : 8,
"active_shards" : 13,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 0,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 100.0
}
I'm wondering if /var/lib/elasticsearch should be in a shared FS for all 3 nodes.
Best Regards
Hamid