I am avvid ELK fan and just starting out with graylog mainly for LDAP integration and mainly for content pack. I need a few basics to be cleared out and would really appreciate if someone can help me with this?
- In Kibana we can make different indices according to the configuration in logstash like document-, logstash-; can we make similar in graylog?
- If not how and where graylog stores the data?
- What is the exact location on HD where those indices are stored?
- And what is exactly content-pack? Are those completely a setting imported along with Dashboard, widget etc…