Thanks for the response! Following your response, I read up on the split brain problem and am moving to a 3-node cluster with one master-only (on logstash server), one master/data, and one data-only.
-- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/0cd3075b-0c37-4036-83ec-86cf423879fe%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.