Remove server for old architecture

(Arcocide) #1

Hi everyone,

I have a old cluster Graylog2 and I would like to keep only one server with data.
This cluster contains 3 server with 2.7 TB.

For free up space I woulk like to remove 2 servers and keep only one server.
Is it possible ? and how ?

Or just delete data on 2 servers and shutdown the 3 servers ?

(Jochen) #2

Which version of Graylog are you using?
Which version of Elasticsearch are you using?
How did you install Graylog?
How did you install Elasticsearch?
What’s the index configuration (number of primary and replica shards)?

(Arcocide) #3

Which version of Graylog are you using : 2.2.3
Which version of Elasticsearch are you using : 2.x
How did you install Graylog : with this procedure : http://docs.graylog.org/en/2.2/pages/installation/os/ubuntu.html
How did you install Elasticsearch : Same that Graylog
What’s the index configuration (number of primary and replica shards) : 3 shard

(Jochen) #4

Please be specific. How many primary and how many replica shards per index?

(Jochen) #5

In general, you could follow this blog post:

(Arcocide) #6

Hi Jochen,

First thanks for your time :slight_smile:

This is all my configuration :

  • 3 nodes
  • 2 write index :

graylog_0: 4 sharding / 180 GB

graylog_1 : 3 sharding / 2.7 TB !!

Is it possible to group all data on a single server ?

(Jochen) #7

That still doesn’t answer my question.

But anyway, just follow the blog post I’ve posted before.

(system) closed #8

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.