I need your help and opinions in my case.
I've got a request for installation ELK Cluster in such configuration:
3 x nodes for Elasticsearch, each node will be master/data/ingest node, on each node will be installed Logstash
1 x node with installed Kibana
I'm afraid about installation Logstash on 3 nodes and his configuration. Maybe I'm wrong and this is typical or standard installation but I'm reviewed few example 3 nodes configuration and alway Lostash was installed only on 1 node.
What do you think about such idea of ELK Cluster?
Could you tell me how to configure logstash in this case, please?
Thanks a lot