Hi again forum.
Iḿ trying to grow up my baby cluster into something more capable, but every intent on modifying the current deploy leads to disaster.
As starting point, I currently have a master/non-data node plus two data only nodes...it works, somehow sluggish, but works.
Logstash is injecting logs intto the cluster through the lone master node
From there, Iḿ trying to grow up:
I have joined 4 extra VMs to the cluster... enabled them as master/non-data:
Result, is old master becomes not the master, logs cant be accessed (on head plugin I see data on the data nodes, but numbered logstash-master-xxxx-yyyy disappeared)
Logstash (which output points to original master) cannot insert data into the EL cluster... the whole thing crewed again.
I have degraded the new nodes to non master / non data ... so at least I could balance them as query nodes with nginx... this works... but I note the cluster becoming slow.
Does logstash write output only works against MASTER elected nodes? or can any node can ingest the data? ... the problem is that by reading de docs it is unclear to me what are the tasks of the master in the cluster, since by my experience, it does more than just be a cluster director.... but the sole data entry point