Currently in our production we are running single node Graylog + ES + MongoDB. We just want to move beyond as our log flow increases day by day.
Our idea is to bring another node with Graylog + ES + MongoDB. Now, for both ES, Graylog we are getting more performance and space to store more logs. There is no problem in forming ES cluster. But Graylog clustering is not happening.
I configured Primary node as is_master=true and other with is_master=false.
I followed following article.
But the second Graylog node is not joining to the cluster and If I login to the Graylog WebUI I am only seeing only one node. Please note that this is to expand the capacity not to provide the HA.
Here we are not using and LB and want to use one WebUI to manage both the ES nodes. My question here, though master graylog manages both ES, will it share the Graylog processing loads (We have a lot of GROK)