<https://lh3.googleusercontent.com/-e7lvCQPjpHU/V0MdBAAkJUI/AAAAAAAACcg/qB-oK1IKTO0ivqVJGO2JtwE6-eU8MwxugCLcB/s1600/graylog_architecture.png> Hello Jochen thank you for your tips.
I am struggling to find documentation on how to set a multinode graylog architecture. I don't know if the architecture illustrated above is correct to do that. I set a load balancer and then a graylog web server.on server0 Then I have two graylog nodes (1 and 2) on two servers (node1 on server1 and node 2 on sever 2 On each node (server1 and 2) I will install mongodb replicat and elasticsearch with the same cluster. My questions are: -- Where to put the graylog web -- How does graylog works with elasticsearch with one cluster: Are the indices from node1 duplicated on node2 and indices on node2 duplicated on node1? Isn"t it cpu consuming? --What would happen if one node is not responding? That is to say if node1 stops node2 will get all the logs. Then if node1 is restarted is there some synchronisation on elasticsearch? --If I set one cluster elasticsearch on each server will it be more efficient? -- I didn't figure out the picture described in http://docs.graylog.org/en/2.0/pages/architecture.html Is the graylog web installed on the load balancer server? Why is there four nodes elasticsearch for 3 graylog nodes? Sorry for all those questions. Regards. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/6992ef23-bbbb-4716-aab7-dda7368cae68%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
