Hi Wayne, On Friday, 21 October 2016 15:44:06 UTC+2, Wayne wrote: > > In the case where I install Elastic search and Graylog in the same > machine, the graylog-x is basically the Elasticsearch index, if I install > Logstash and configure the Elastic search as input and Graylog as log > server to receive input, isn't this an endless loop because the input and > destination are the same search index? >
Ideally, you would read from an older index (e. g. "graylog_0") into the current write-active index (e. g. "graylog_1"). Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f1e2d291-08eb-431a-b43b-885d1981a6e8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
