Hope my question isn’t trivial! I need to manage different sites, what’s the best deploy to have a central graylog that can manage sidecar collectors in the remote site? In my mind a VPN with rabitmq would be fine, there is other and better way?
you could work with something like this:
thank you Jan, i’ve already read this doc but I thought that AMQP was only for incoming message … you mean that i can use the same thing for the configurations?
sorry misread your initial post.
RabbitMQ would be used for the transport of messages from the remote side to the central location.
To configure the collectors on the remote site I would go with vanilla collectors like filebeat and configure them with your configuration management, like ansible or similar. The Sidecar is not build for that kind of setups.