3 opensearch nodes (all three data, one also marked cluster manager]. All three reside in the same subnet on the same ProxMox host. Each node has 32GB RAM (heap set to 16GB) and 16 cores.
One thing that may cause issues (that I am now just realizing) is that each node is identified within the Graylog server conf by their FQDN as opposed to IP address.