I installed filebeat on VM1 and installed two nodes of elasticsearch on VM2 and VM3 which these two nodes make a cluster. Now, i want to ship logs into cluster using filebeat. in the "output.elasticsearch" part of filebeat.yml, should i write the address of both nodes or just one of them?. any comments should be appreciated. many thanks.