please forgive me that I constantly create new topics as I find my way into the Graylog world.
At the moment my setup consists of a Graylog server (incl. MongoDB) and an Elasticsearch server.
I have configured my Graylog server to also be a Elasticsearch Master node, while the Elasticsearch server is only a data node.
The config of the master node is located in /etc/graylog/server/server.conf and I configured the index of my elasticsearch data node through the WebUI for max. number of indices and rotation period.
My question now: is this stored somewhere in a config file? Because I can’t seem to find this setting through the elasticsearch.yml file on my elasticsearch (data) server.
and the setting of my master node in the server.conf still says:
rotation_strategy = count
elasticsearch_max_docs_per_index = 20000000
elasticsearch_max_number_of_indices = 20
this doesn’t match with what I have configured through the webUI, so it is probably stored somewhere else…but where?
appreciate any form of help/reply!
thanks and cheers,