Graylog Cluster and Load Balancing

What does you Filebeat config look like?

Graylog sidecar error

EDIT:

HTTP 401 Unauthorized client error status response code indicates that the request has not been applied because it lacks valid authentication credentials for the target resource.