I have Graylog cluster with 3 nodes. I have set input using GELF kafka and I send all my logs to kafka.
I send about 100 thousand logs to test my set up. I can see only one of the node (Node 1) tries to process all the 100 thousand logs while the other 2 nodes are not doing any processing. If I stop Graylog server on Node 1 and then send 100k logs, then Node 2 processes it while Node 3 is not processing. So i can see that all 3 nodes are able to read from the kafka topic but only 1 node processes the logs. How can I can balance the load between all 3 Graylog nodes?