Create a parallel log database to search querys

I’m new to using graylog and I have an infrastructure already assembled with a cluster where I have the various hosts.
I have a sidecar that is used on all hosts and I would like to create a parallel where on 2 hosts I took the logs from a specific path in order to create error search queries.
it’s possible ? what is the best option to get the logs from another path than the ones that are configured for the whole cluster.
sorry if the question is silly.

Not sure what version you are on but you can easily clone the configuration that is currently applied to all machines:
then modify the cloned version and apply that specifically to the machines with the added logging needs under Sidecar Administration…

Is that what you mean?

it make sense i will try…

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.