Graylog use the HELK Elasticsearch

So I had a stand alone of graylog that I have been using for a bit and I notice that it uses elasticsearch. I know HELK stack has a docker that has an elasticsearch that it sets up. Will I be able to integrate the graylog elasticsearch to this docker instance and use the one instance of it.

Hey @RobS, welcome!

Are you asking if you can configure Graylog to use your existing HELK elasticsearch instance? Rather than setting up a new one? If you deployed your standalone instance using the OVA then ES was included, but you don’t have to use that one, in fact I believe the deployment guide recommends connecting to dedicated/separate ES.

I would like to intergrate Graylog into an existing HELK stack

This may help

https://docs.graylog.org/en/3.3/pages/configuration/elasticsearch.html

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.