# Indepth guide for proper setup of log monitoring

**URL:** <https://community.graylog.org/t/indepth-guide-for-proper-setup-of-log-monitoring/8922>\
**Category:** Graylog Central (peer support)\
**Created:** [February 16, 2019, 9:54am UTC](https://community.graylog.org/t/indepth-guide-for-proper-setup-of-log-monitoring/8922 "2019-02-16T09:54:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![h12nkhb4](https://avatars.discourse-cdn.com/v4/letter/h/ecccb3/32.png) [@h12nkhb4](https://community.graylog.org/u/h12nkhb4)\
**Post date:** [February 16, 2019, 9:54am UTC](https://community.graylog.org/t/indepth-guide-for-proper-setup-of-log-monitoring/8922/1 "2019-02-16T09:54:16Z")

</div>

So I installed, setup and configured some hosts to send their logs to Graylog. It works great, I can search and find whatever I want.

I’ve read pretty much the entire Graylog documentation and understand how it works, in some degree at least. The docs are great in explaining what each part does but its also evident that setting it up properly is not an easy task (I didn’t think it was).

So now I’m looking for a guide that deals with setting up for the bigger picture written from experience.

If you know something out there please share it.

Thanks.

---

<div class="post-metadata">

**Author:** ![Totally\_Not\_A\_Robot](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/totally_not_a_robot/32/3353_2.png) [@Totally\_Not\_A\_Robot](https://community.graylog.org/u/Totally_Not_A_Robot)\
**Post date:** [February 16, 2019, 7:53pm UTC](https://community.graylog.org/t/indepth-guide-for-proper-setup-of-log-monitoring/8922/2 "2019-02-16T19:53:22Z")

</div>

> [@h12nkhb4](#):
>
> So now I’m looking for a guide that deals with setting up for the bigger picture written from experience.

Ooofff… Now, I’ve read plenty of good tutorials online, and I’ve written a fairly big design and implementation guide for my customer(s) but I can’t share that one with you. So: good question!

I know the Graylog team provide for an actual training course as well. Maybe someone should write an actual, big book for that 🙂

---

<div class="post-metadata">

**Author:** ![h12nkhb4](https://avatars.discourse-cdn.com/v4/letter/h/ecccb3/32.png) [@h12nkhb4](https://community.graylog.org/u/h12nkhb4)\
**Post date:** [February 17, 2019, 8:09am UTC](https://community.graylog.org/t/indepth-guide-for-proper-setup-of-log-monitoring/8922/3 "2019-02-17T08:09:00Z")

</div>

> [@Totally\_Not\_A\_Robot](#):
>
> Ooofff… Now, I’ve read plenty of good tutorials online

Can you share those then because I’m not really finding any.

---

<div class="post-metadata">

**Author:** ![Totally\_Not\_A\_Robot](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/totally_not_a_robot/32/3353_2.png) [@Totally\_Not\_A\_Robot](https://community.graylog.org/u/Totally_Not_A_Robot)\
**Post date:** [February 17, 2019, 8:17am UTC](https://community.graylog.org/t/indepth-guide-for-proper-setup-of-log-monitoring/8922/4 "2019-02-17T08:17:46Z")

</div>

Well, I too have mostly gone by the official docs, like:

[http://docs.graylog.org/en/2.4/pages/configuration/multinode\_setup.html](http://docs.graylog.org/en/2.4/pages/configuration/multinode_setup.html)

And the _Several Nines_ blogpost:

> **[High Availability Log Processing with Graylog, MongoDB and ElasticSearch](https://severalnines.com/blog/high-availability-log-processing-graylog-mongodb-and-elasticsearch)**
>
> This blog post discusses how to deploy a Graylog cluster, with a MongoDB Replica Set deployed using ClusterControl.

But as you already pointed out, there’s not much out there regarding actual long-time experiences. the closest you’ll find are these forums which have lots of valuable information mixed in with the weekly _same-question-every-week_ topics.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [March 3, 2019, 8:24am UTC](https://community.graylog.org/t/indepth-guide-for-proper-setup-of-log-monitoring/8922/5 "2019-03-03T08:24:47Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
