We have a Beats Input setup in Graylog 3.1, the problem is that the Beats Input is pending between running and not running on all three nodes. So all 3 Inputs are not always up and running. Is this a normal behavior?
I’ve also noticed that if you try to stop the input via the GUI it won’t stop on all three nodes. This causes problems when trying to start the input again with error messages from the node where the input didn’t stop.
Our current Graylog Setup:
Graylog 3.1 (Upgraded from 2.5)
3 Graylog nodes
4 separate ES data nodes.