Hello world!
I’ve got 2 Data Nodes connected to my Graylog server.
Can someone explain to me where to find an explanation on how to specify which Data Node is connected to an Index Set?
Thank you for your help!
They work as a cluster, they just balance things as needed, you don’t pin indices to particular nodes. You can turn on replica sets, which will then keep a copy of the data on more than one node.
You mean I cannot store my logs on different data nodes depending on criteria?
Correct. What are you trying to accomplish?
Hello,
I was thinking about pushing logs:
- from a Cisco router to one node (short retention: 1 month, no backup),
- from a RADIUS server to another node (long retention: 1 year, with backups).
So, I set up my Graylog environment as follows:
- 1 VM: Graylog server with MongoDB installed
- 2 VMs: Graylog data nodes only
However, I can’t see the disk usage of my data nodes in the Graylog server interface.
No you set the retention on index level, so they dont need to be on seprate servers for that. Yes today you cannot view space usage in the open product. So normally what you do is keep an eye on it until you reach full retention and then by that point it will settle down and stay around the same size.