[graylog2] Re: add ES server to increase performance

2015-02-02 Thread Jochen Schalanda
Hi Anders, in my experience master only nodes aren't *that* useful in a small cluster setup (as in your case: 3 ES nodes). I would recommend letting the third node join the cluster and rebalance the shards and replicas across all 3 ES nodes. If you're not already running Elasticsearch 1.4.x,

[graylog2] add ES server to increase performance

2015-02-02 Thread anders larsson
i got 2 graylog server and 2 ES and got some performance issues. i have one more ES server to add now.. should i add it as node master and let the oterh 2 ES just be storage nodes ? // Anders -- You received this message because you are subscribed to the Google Groups graylog2 group. To

[graylog2] Re: setup best practice

2015-02-02 Thread Jochen Schalanda
Hi Anders, you can disable the time range calculation for all indices with the *disable_index_range_calculation* ( https://github.com/Graylog2/graylog2-server/blob/0.92.4/misc/graylog2.conf#L340-344) setting in your graylog2.conf. As for the indices you could also use the time-based retention

[graylog2] Re: graylog ouput to cassandra or hbase

2015-02-02 Thread tam vu
thanks Jochen, I will find other way. Tam Vào 16:18:20 UTC+7 Thứ Hai, ngày 02 tháng 2 năm 2015, Jochen Schalanda đã viết: Hi Tam, you could probably build a Frankenstein setup using the GELF output plugin of Graylog feeding into fluentd which in turn pipes the data into HBase. But I

[graylog2] Widged - showing message count over time

2015-02-02 Thread Rob Erix
Hi. Is there a possibility to create a widget which shows the results of a search in a graph over time? I want to show the number of log messages from a specific source containing a specific word per minute or per hour. (very similar to the sources style - message per minute) Thank you for

[graylog2] Re: Widged - showing message count over time

2015-02-02 Thread Jochen Schalanda
Hi Rob, that's pretty much exactly what the histogram widget does. Simply create the query within the time-range you want (e. g. 1 day ago), enter the query (source:YOUR_SOURCE message:WORD), run the query and select the required resolution in the result histogram (e. g. Hour, below the

[graylog2] Re: Widged - showing message count over time

2015-02-02 Thread Rob Erix
Thank you. Somehow I complete missed that icon on the histogram. Maybe this should be added to the dashboard examples of the documentation as this could be a very common use case. Regards Rob On Monday, February 2, 2015 at 4:51:12 PM UTC+1, Rob Erix wrote: Hi. Is there a possibility to

[graylog2] Re: graylog ouput to cassandra or hbase

2015-02-02 Thread Jochen Schalanda
Hi Tam, you could probably build a Frankenstein setup using the GELF output plugin of Graylog feeding into fluentd which in turn pipes the data into HBase. But I don't have any turn-key solution for you. Cheers, Jochen On Monday, 2 February 2015 08:40:06 UTC+1, tam vu wrote: Hi Jochen,