graylog2 v 2.20 is great with a lot of new features and it's a lot more
stable than previous one, Though we modified the old source code but before
we could commit it back to graylog2 the new version was released, however
we are forked again the latest version and once the developer finishes we
will commit it back to graylog2 git repository.
There are few changes that we would like to do to graylog2-server and I
would really appreciate if the authors can help us guide so instead of
wasting time on finding the right place to change we can proceed with
change quickly.
1. currently New Elasticsearch index is created when a certain number of
documents are inserted in index, we would like to give users two options in
config.
elasticsearch_index_close_cond: {count, time}
if count
elasticsearch_max_docs_per_index = N
if time
elasticsearch_index_close_interval = (1d, 1w, 1m)
2. IF possible we would help graylog2 team by adding Routing option for ES,
currently we experience the issue of balancing between cost of operation
and duration of logs we want to keep in our system, we are looking for an
option where the latest 1 week logs stay in high I/O performance nodes and
old one moves to low performance I/O.
any guidance from the graylog2 team will be highly appreciated in this
regard.
3. Scheduled report delivery.
thanks
Asad
--
You received this message because you are subscribed to the Google Groups
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.