Graylog cluster with multiple ethernet interfaces

First of all a greeting to this community, I write for the first time in this new forum.

I have Graylog in cluster with a master node that receives and distributes the logs and has the web interface as well and two elastic nodes that store the data in duplicate.

The thing is that until now I had everything running perfectly in the subnet but now I want to add a network card to the main server, and move all 3 servers to the subnet but keeping the log entry for

I show it in a graphic to make it clearer:

I do not know how to make the network configuration / graylog / elastic so that it works as I want.
I have tried to add a card and configure it as follows:

But it does not answer me for both networks and graylog does not work correctly.

Any idea what steps to follow? In summary, I want to keep the cluster (triangle of the 3 servers) by the subnet but that the reception of logs and communication of the collectors continues to be for the

Thanks and best regards!

Configure Graylog to listen on the network (rest_listen_uri, web_listen_uri, and related settings) and to connect to Elasticsearch on the network (elasticsearch_hosts).

Also check out the documentation for details:

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.