I asked this back in April and I'm still looking for an answer. I have a protected VM running graylog/mongo/elastic, and all of our actual graylog usage takes place on a slave VM due to the way user accounts work.
My question is about the slave graylog log events. They all show "Received by deleted input on outdated node" presumably because none of the "inputs" are local, and the elastic index is also remote. Is this a configuration error on my part, or is this just a consequence of using this arrangement? Is there any way to have them appear with the input and node on the remote? -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.