I am looking to streamline my logstash configuration files and I was curious if I could send data to my kibana related elasticserach instance (which does not store data) and simply have my remaining two nodes act as storage rather than having input handled by the separate nodes as individual ingest points
To Draw what I am talking about
right now
logstash->es1&es2
the new version
logstash->esmaster(nostorage)->escluster(dual storage nodes)