I’ve created a custom docker containing opendistro elasticsearch, kibana and Logstash. All examples I’ve seen uses 3 or even more instances of docker:
2 elastic nodes
1 kibana node
1 logstash node
What’s a “good” reference set up to start with? Is it a bad idea having all components on the same docker instance?
you can start with this one:Docker - Open Distro Documentation but you need add logstash node for it.
just realized this is old question. not sure it’s still useful for you.