# Help with clusters; multi-elastisearch (opensearch) vs multi-graylog clusters

**URL:** <https://community.graylog.org/t/help-with-clusters-multi-elastisearch-opensearch-vs-multi-graylog-clusters/32014>\
**Category:** Graylog Central (peer support)\
**Tags:** elastic, architecture, capacity\_planning\
**Created:** [April 2, 2024, 10:33pm UTC](https://community.graylog.org/t/help-with-clusters-multi-elastisearch-opensearch-vs-multi-graylog-clusters/32014 "2024-04-02T22:33:46Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Errand0596](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/errand0596/32/16463_2.png) [@Errand0596](https://community.graylog.org/u/Errand0596)\
**Post date:** [April 2, 2024, 11:04pm UTC](https://community.graylog.org/t/help-with-clusters-multi-elastisearch-opensearch-vs-multi-graylog-clusters/32014/2 "2024-04-02T23:04:40Z")

</div>

On this topic: [Multi-site considerations - #2 by gsmith](https://community.graylog.org/t/multi-site-considerations/29806/2)

These comments recommended the below, maybe it would be good in my situation?

From user gsmith

> To be honest, If I had two clusters, in two different data centers, they would consist of ES/OS, Graylog and MongoDb. Going off your statement, I would forward my logs from DC-2 to DC-1. MongoDb just holds metadata and my main worrry would be in ES/OS which holds all the data. Just an idea.

> For example:  
> I have 6 nodes in Germany, 6 nodes in UK and 6 nodes here In Iowa. Each of the 6 nodes consist of 3 OpenSearch nodes and 3 Graylog/MongoDb nodes. UK nodes forwards Log to Iowa, Germany cluster Forwards logs to Iowa. In case of Internet interruption or issues each DMZ is contained till the connect comes back. These are all runned through a VLAN and some other security stuff.  
> On the cluster in Iowa, I have a index set called **UK** and another called **Germany** from there I create alerts and widgets to those geographical locations. It all breaks down on your environment and the ability to expand if need be.  
> Hope that helps.

---

_[View the full topic](https://community.graylog.org/t/help-with-clusters-multi-elastisearch-opensearch-vs-multi-graylog-clusters/32014)._
