Centralized independent architecture

Graylog Central (peer support)
1

Hello Graylog Community.

I’m planning a new Graylog architecture.

Our needs are to log on premises from the source and to be able to query them locally and on a central node.

A setup like that is needed because, in any moment, we have to be able to disconnect and isolate any node from one another, keeping the ability to access to the local client browser.

The local nodes should be 3, this an example:

Simple 3 Nodes
Simple 3 Nodes682×1373 51.2 KB

What do you suggest?

2

Hello @soc && Welcome

Are all these DC’s in the same DMZ or are they separate?

  • If there in the same DMZ then one Graylog node would be good.
  • If they are in different DMZ’ you could place a graylog server in each DMZ and forward the log/s to a central Graylog server.

Basically and loosely speaking, turn Graylog server/s into proxy’s and forwarding the log/s to one Graylog server for monitoring.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.