I have two logstash nodes. which at this time only running logstash.
no elasticsearch runs on it. each has about 15 pipeline running.
in elk cluster I have 5 master node, 5 data node.
Currently I can't see logstash nodes in my cluster as it is not running elasticsearch.
would it be advisable to convert logstash node to Coordinating only node?
that way I can monitor logstash jvm/process etc.. and have minimum master function.
Your OP started saying that you can't see Logstash monitoring information, and then asked about coordinating nodes. It was confusing, hence my comments and questions.
Coordinating nodes will use resources, how much and if it's a lot is entirely relative to your use case and the available resources. Normally they will use more CPU and memory than disk.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.