As Magnus points out the key is to have at least 3 master eligible nodes so that another can step in when one fails. When changing this, make sure to update the minimum_master_nodes setting in the elasticsearch.yml config files in order to avoid split brain scenarios. If you make all 4 of your nodes master eligible, this should be set to 3.