If I use Filebeat internal loadbalancer, and say I want to add a new logstash node. I would have to take down all my filebeat instances and then change the configuration and start them up, right ? Is there another way ? Please suggest.
We have like 20 nodes that have filebeat running ( and two logstash instances), and it will increase in the future. It is bit inconvenient to take down and start all of them. What is a good combination of filebeat nodes-logstash nodes.