Collectors on HA environment


(Bryan) #1

Hello Guys,

currently we have an infrastructure which is 3 servers, the 3 of them running graylog, elastic, and mongodb, the 3 applications running on cluster, we have a load balancer in front of the servers, but we haven’t found a way to send the collectors information to the “cluster” just to single graylog nodes, we currently use nxlog as the collector with the sidecar.


(Scampuza) #2

Hi Bryan

We have a similar cluster at our company. what we have is our Load Balancer, “load balancing” the Inputs, in our case, we have GELF TCP inputs, so when the collector sends a message to the LB, LB forwards it to one of the 3 GL nodes.

If you need any further help, let me know.


(Bryan) #3

Hi @scampuza, in my case I do not handle the load balancer, but seems that it needs a configuration for each port, so if im sending gelf tcp messages to port 12201, I have to request a rule for loadbalancing traffic on that port, and on each port i want graylog to be listening, is the same on your cluster?

thanks in advance.


(Scampuza) #4

Hi @bryan.cerdas.mcmcg.

Thats right.

I can give you an example, we have a Beats Input listening in port 5044, so, I requested our LB sys admin a rule in the LB as follows:

GrayLog Beats Input

a. VIP Address: 10.10.0.124. (this is the LB IP address)
b. Service Port: 5044
c. Service Type: TCP
d. Balanced IP Addresses: 10.10.0.121, 10.10.0.122, 10.10.0.123. (GL IP addresess)
e. Round Robin


#5

Hi.

You can order a port range from LB team. No need to order individual ports for inputs.


(Bryan) #6

Hi @jtkarvo thanks for the suggestion, i will try that.


(Bryan) #7

@scampuza @jtkarvo guys thanks a lot for the help, i will try to implement using your suggestions.


(system) #8

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.