I’m looking to create a 3-node datanode cluster for new Graylog 7 install, however I’m not finding much information/documentation on how to do this. The official docs only shows how to create a single datanode. Looking at the available datanode.conf properties, it looks like you can set opensearch_discovery_seed_hosts and initial_cluster_manager_nodes to build the cluster. I’m assuming this is the right apporach? Moreover, I also want to turn on transport TLS encryption. Again, there is little to mention of this. Similarly, the datanode.conf properties page shows that there is transport_certificate and transport_certificate_alias. Do I just generate a CA, then server cert for the nodes with CN/SANs that contain all the hostnames and package it into a keystore for use?
This is the point of datanode, it handles most of this for you. You just install each datanode, then make sure they are all pointing at your mongodb database, then when you start graylog it will send you first to the preflight website wizard that will walk through connecting all the nodes.
Gotcha. Apologies as I have not gotten that far yet. I assume during the wizard, I can select to enable transport TLS?
Certificate based authentication, and TLS communication is the default, so you dont really “pick” it, but it is what it will be.
Awesome. Thank you for the clarifications.