I need to capture metrics that are clustered (microsoft windows), such that specific resources move when the cluster moves. Some resources stay on the node, other move between nodes as the cluster moves.
How are *beats installed such that the host writes either the cluster name or the host name according to our capture requirements?
In the past I have installed multiple services- one configured on the cluster (so failover with the cluster) and one on each node, for node specific capture. Is this the required approach?