# Graylog Multi-Node Topologies

**URL:** <https://community.graylog.org/t/graylog-multi-node-topologies/10665>\
**Category:** Graylog Central (peer support)\
**Created:** [June 3, 2019, 12:27pm UTC](https://community.graylog.org/t/graylog-multi-node-topologies/10665 "2019-06-03T12:27:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![gruselglatz](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gruselglatz/32/4126_2.png) [@gruselglatz](https://community.graylog.org/u/gruselglatz)\
**Post date:** [June 3, 2019, 12:27pm UTC](https://community.graylog.org/t/graylog-multi-node-topologies/10665/1 "2019-06-03T12:27:52Z")

</div>

Hi,

as I didn’t found any info on possible topologies of a multi-node setup i ask it here.

Is it possible to do a multi-node setup with a star topology? So that only the master node sees all other nodes. And the nodes work on there own, and process the logs alone?

Or do I have to have a meshed topology for all nodes?

The Nodes should only work as aggregator + some pipeline magic for multiple beats to output to an ES-Cloud instance. So no searching on this “Edge”-nodes.

thx

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [June 3, 2019, 3:02pm UTC](https://community.graylog.org/t/graylog-multi-node-topologies/10665/2 "2019-06-03T15:02:59Z")

</div>

currently what you have in mind is not possible - you can see that as issues in the Graylog server repo with the keyword `federation`

> <https://github.com/Graylog2/graylog2-server/issues/3969>

With the current Graylog Forwarding in Enterprise you could forward from one to another Graylog and do the parsing at the initial sender to provide only already parsed messages or only specific details over to a central Graylog. But that might not be what you are looking for.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 17, 2019, 3:03pm UTC](https://community.graylog.org/t/graylog-multi-node-topologies/10665/3 "2019-06-17T15:03:02Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.