Gray log server 3 active-active Deployment

Problem statement : we have deployed grey log server which contain 3 syslog server and 3 elastic search server we are facing issue in configuring the 3 elastic server in cluster as well as connectivity with the syslog server Expected Output: The elastic server must be able to store log in syslog server being in active state with as well as work standalone in case of failure of the 2 server.