Thank you for the draft. That is what I was going for unless there would have been any other options. Based on the draft I have another question: Does the Graylog-Master needs to be on one of the UI-hosts or can it be one of the hosts used for receiving the log-data?
Regards, Jan Am Dienstag, 28. Juni 2016 16:13:43 UTC+2 schrieb Jan Doberstein: > > Hej Jan, > > > On 28. Juni 2016 at 12:45:40, [email protected] <javascript:> > ([email protected] <javascript:>) wrote: > > Would I need to put all four graylog machines in one "Graylog Cluster"? > Or > > do I need to split the Collector-Hosts from the UI-Hosts but point > > them to the same MongoDB and Elasticsearch-cluster? (I would configure > one > > of the Collector-Hosts as "master", all the other hosts as "is_master = > > false" and > > enable the WEB-Interface only on the two UI-hosts). > > You need to have all Graylog System in the same “cluster” - that means > all Server need to talk to the same mongodb instance, need to be able > to talk to each other graylog api listen uri and need to be able to > connect to the elasticsearch cluster. > > The Web Interface on the “Collector” Hosts can be disabled: > > https://github.com/Graylog2/graylog2-server/blob/master/misc/graylog.conf#L84-L86 > > > However you design your Network, i had attached a draft how the > components need to communicate! > > hope that helps you > > /jd > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2aa3da04-9344-41c2-a10c-6dc50de7e198%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
