Hi, on this FAQ page for multi-datacenter setup: http://docs.graylog.org/en/2.2/pages/faq.html.
"I have datacenters across the world and do not want logs forwarding from everywhere to a central location due to bandwidth, etc. How do I handle this?"
Answer: “You can have multiple graylog-server instances in a federated structure, and forward select messages to a centralized GL server.”
Can someone provide the documentation for a federated structure setup?
For smaller datacenters, will you still recommend a full production architecture, or will a minimum setup be sufficient?