Thank you that’s great advice. I’ll give that all a go and see how it looks after a month. At the moment it’s stable, so I can spend more time improving too
Feel free to experiment with it as much as you can while it’s not in production, sometimes depending on the type of log you ingest and what you do with them afterwards completely determines what hardware to run on - similarly, don’t forget that Elasticsearch in and of itself can be tuned as well - more often than not I see that people get their Graylog going and forget that Elasticsearch is behind it and that needs its own set of resources (and comes with its own set of headaches).
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.