Single input for multiple nodes

I am looking to streamline my logstash configuration files and I was curious if I could send data to my kibana related elasticserach instance (which does not store data) and simply have my remaining two nodes act as storage rather than having input handled by the separate nodes as individual ingest points

To Draw what I am talking about

right now
the new version
logstash->esmaster(nostorage)->escluster(dual storage nodes)

You can, but if that node goes down then you stop processing. I would just leave it as it.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.