I’ve been using a simple graylog config for a few months (elastic,mongo, graylog all on one server).
Now I want to add some more inputs which will require more storage space.
I wanted to store these logs on a separate physical disk but didn’t see how to configure that on the single graylog server.
Then I thought if i created a new elasticsearch node, I could add the disk there and configure graylog to store those inputs on only that node.
I created the elasticsearch node and it is communicating properly with the one on the graylog box. But I still don’t see any option to configure a specific input to store it’s data on only the new elasticsearch node.
What I am seeing is that graylog duplicated the already existing data onto the new elastic node.
Is what I am trying to do possible with graylog? If it is, where are the configuration settings?