I’m very new to Graylog, so I apologize for the possibly basic question. We would like to include Graylog in our Citrix Master/Golden image, but I’m unsure of the best practice around making sure each VDA gets a new node-id, and not one that is cloned when we deploy the image out to multiple VDAs. In for first experiment, I provisioned 2 VDAs, and they both had the same node-id. Is it that we need to delete the node-id file before we seal the image for deployment? Thanks for your help!
2. Describe your environment:
OS Information:
VMware vCenter
Windows Server 2022
Great, thank you! When I set it up, I think I followed a non-Graylog guide; if you are collecting logs from the filesystem via filebeat (in particular, ones under a user’s profile on Windows), do you need the sidecar to be installed and NXLog, or just one or the other?
Bubbling this backup if that’s OK. This works, however, every time the VDA boots, it gets a new node-id. However, in the collectors administration area, there are multiple machines with the same name now (but with separate node-ids):
There is a setting for how often offline sidecars a purged, i think it defaults to 5 days. You could lower that, which would help a little. Aside from that you would need to do some advanced logic on the machines for when to delete the node id file and when not to.
