Should the logs be written to journal instead of send to elasticsearch directly ?
Can i message_journal_enabled = false ? So, the logs will be written to ES directly.
Is it possible ?
sure this is possible - but you will have lost messages if your elasticsearch has issue, your Graylog might die on message bursts and if you use TCP direct out of your application even production can have problems is something in the backround run into issue.
so, yes possible. But we do not advice to do so
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.