Please re-image the following nodes, to be used by Logstash, hostnames should be logstash1004-006.
Dell PowerEdge R420, dual Intel Xeon E5-2450 v2 2.50GHz, 64GB Memory, (4) 3TB Disks
This request is approved by Mark.
The plan is to keep Logstash and Kibana on logstash1001-003, migrating Elasticsearch to these new nodes. This is proposed as a temporary solution until hardware is purchased specifically for Logstash (+ Elasticsearch) per T84958, because the current config is experiencing OOM events daily.