ELK Stack Architecture recommendation

Hello, I want to deploy Elastichsearch in a environment to collect logs from few virtual machines in a network and insert those logs in a single Elasticsearch node and visualize the data via Kibana, but I don't know how I should do it, should I run Filebeat on every VM that I want to collect logs and the Elasticsearch, Kibana and Logstash on a vm?
or all of these module can be in a machine and Filebeat can remotely collect the logs from VMs?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.