currently we have an infrastructure which is 3 servers, the 3 of them running graylog, elastic, and mongodb, the 3 applications running on cluster, we have a load balancer in front of the servers, but we haven’t found a way to send the collectors information to the “cluster” just to single graylog nodes, we currently use nxlog as the collector with the sidecar.
We have a similar cluster at our company. what we have is our Load Balancer, “load balancing” the Inputs, in our case, we have GELF TCP inputs, so when the collector sends a message to the LB, LB forwards it to one of the 3 GL nodes.
Hi @scampuza, in my case I do not handle the load balancer, but seems that it needs a configuration for each port, so if im sending gelf tcp messages to port 12201, I have to request a rule for loadbalancing traffic on that port, and on each port i want graylog to be listening, is the same on your cluster?
I can give you an example, we have a Beats Input listening in port 5044, so, I requested our LB sys admin a rule in the LB as follows:
GrayLog Beats Input
a. VIP Address: 10.10.0.124. (this is the LB IP address)
b. Service Port: 5044
c. Service Type: TCP
d. Balanced IP Addresses: 10.10.0.121, 10.10.0.122, 10.10.0.123. (GL IP addresess)
e. Round Robin