i would like to ask you, if there is any option how to centralize graylog input from multiple location, without send logs to central viewer (graylog server).
one option is to send logs to inputs from all locations, but I had such an idea if it would do without it.
on screen below, i describe how my graylog farm should work.
on the top is should be a central graylog server, which should only show netflow from multiple location below.
is there any option, how to do that, without sending logs from any location, to central graylog?
perhaps I described it understandably.