1. Describe your incident: I’m very new to Graylog, so I apologize for the possibly basic question. We would like to include Graylog in our Citrix Master/Golden image, but I’m unsure of the best practice around making sure each VDA gets a new node-id, and not one that is cloned when we deploy the i…

Do you mean the graylog sidecar agent on a windows machine?

Great, thank you! When I set it up, I think I followed a non-Graylog guide; if you are collecting logs from the filesystem via filebeat (in particular, ones under a user’s profile on Windows), do you need the sidecar to be installed and NXLog, or just one or the other?

Filebeat and winlogbeat are bundled with thr windows installer of sidecar, everything else you need to manually add.

Bubbling this backup if that’s OK. This works, however, every time the VDA boots, it gets a new node-id. However, in the collectors administration area, there are multiple machines with the same name now (but with separate node-ids): [image] Is there a recommended way to handle this?

There is a setting for how often offline sidecars a purged, i think it defaults to 5 days. You could lower that, which would help a little. Aside from that you would need to do some advanced logic on the machines for when to delete the node id file and when not to.

Citrix Gold Image - Best Practices

Graylog Central (peer support)

Joel_Duffield (Joel Duffield) September 23, 2023, 12:04am 4

Okay, so ya just delete that file and a new one will be created the next time the service starts, and you should be good to go.

Topic		Replies	Views
Default Sidecar collector in configuration? -- features request Graylog Central (peer support) sidecar	3	676	March 28, 2022
Graylog Sidecar Graylog Central (peer support) sidecar , nxlog , filebeat-windows , winlogbeat , nodatanx	7	2421	May 21, 2020
Filebeat Collector Sidecar: How to override collector_node_id in config? Graylog Central (peer support) sidecar	1	848	October 14, 2018
Filebeat sidecar needs to be restarted on Windows reboot Graylog Central (peer support) sidecar , filebeat-windows , winlogbeat	2	681	November 18, 2020
Implement graylog in windows enviroment Graylog Central (peer support) sidecar , filebeat-windows , winlogbeat	3	4837	December 2, 2019

Citrix Gold Image - Best Practices

Related topics