# \#architecture **URL:** https://community.graylog.org/tag/architecture/97.md [Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md) --- ## [Graylog DataNode Storage – Can Wasabi S3-Compatible Storage Be Used for Hot Data and Archiving?](https://community.graylog.org/t/graylog-datanode-storage-can-wasabi-s3-compatible-storage-be-used-for-hot-data-and-archiving/37568)
**Author:** [@Golobolus](https://community.graylog.org/u/Golobolus)\ **Replies:** 1\ **Last updated:** [September 21, 2026, 8:07am UTC](https://community.graylog.org/t/graylog-datanode-storage-can-wasabi-s3-compatible-storage-be-used-for-hot-data-and-archiving/37568 "2026-09-21T08:07:22Z")
Hi Graylog Community, We are currently evaluating our Graylog storage architecture and would appreciate some guidance from the community. Our current setup has Graylog DataNodes using AWS EFS for data storage. The envi… --- ## [Upgrade from 5.2 to 6.0 Fails](https://community.graylog.org/t/upgrade-from-5-2-to-6-0-fails/37471)
**Author:** [@AutosystemsIT](https://community.graylog.org/u/AutosystemsIT)\ **Replies:** 3\ **Last updated:** [July 27, 2026, 6:08pm UTC](https://community.graylog.org/t/upgrade-from-5-2-to-6-0-fails/37471 "2026-07-27T18:08:40Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Graylog Cluster with MongoDB 8](https://community.graylog.org/t/graylog-cluster-with-mongodb-8/37341)
**Author:** [@DoubleM](https://community.graylog.org/u/DoubleM)\ **Replies:** 2\ **Last updated:** [June 4, 2026, 9:39am UTC](https://community.graylog.org/t/graylog-cluster-with-mongodb-8/37341 "2026-06-04T09:39:51Z")
1. Describe your incident: I am building a Graylog Cluster, consisting of 2 Graylog Server and 2 Datanode Server. As I followed the Installation Manual I build a MongoDB ReplicaSet named “rs0”. Find the exact environm… --- ## [Greylog message error](https://community.graylog.org/t/greylog-message-error/37315)
**Author:** [@dgchultaeiz](https://community.graylog.org/u/dgchultaeiz)\ **Replies:** 0\ **Last updated:** [May 22, 2026, 2:04pm UTC](https://community.graylog.org/t/greylog-message-error/37315 "2026-05-22T14:04:02Z")
Describe your incident: I have a random UI message in Graylog: “Node cannot be found among active nodes” The node is real and active: Single-node installation The node ID exists in: /etc/graylog/server/node-… --- ## [Request for Clarification / Temporary Compatibility Guidance for Graylog 7.0 with MongoDB 4.4](https://community.graylog.org/t/request-for-clarification-temporary-compatibility-guidance-for-graylog-7-0-with-mongodb-4-4/37311)
**Author:** [@ahnaf702](https://community.graylog.org/u/ahnaf702)\ **Replies:** 1\ **Last updated:** [May 21, 2026, 3:21pm UTC](https://community.graylog.org/t/request-for-clarification-temporary-compatibility-guidance-for-graylog-7-0-with-mongodb-4-4/37311 "2026-05-21T15:21:18Z")
Hello Graylog Support Team, We are currently performing an upgrade and compatibility validation for our Graylog environment and would appreciate your guidance regarding MongoDB compatibility behavior in Graylog 7.0. En… --- ## [Graylog-7.0 Install Issue](https://community.graylog.org/t/graylog-7-0-install-issue/37060)
**Author:** [@rsailopal](https://community.graylog.org/u/rsailopal)\ **Replies:** 5\ **Last updated:** [March 17, 2026, 8:23am UTC](https://community.graylog.org/t/graylog-7-0-install-issue/37060 "2026-03-17T08:23:26Z")
We’re having issues installing the latest version of Graylog 7 on Amazon Linux 2003 using the latest rpm. This was working fine a few weeks ago when we were testing but now we are having issues. We are following the ins… --- ## [Graylog does not open port 9000 after upgrade 5.0.13 \> 5.1.13](https://community.graylog.org/t/graylog-does-not-open-port-9000-after-upgrade-5-0-13-5-1-13/37025)
**Author:** [@KPS](https://community.graylog.org/u/KPS)\ **Replies:** 1\ **Last updated:** [February 26, 2026, 7:17am UTC](https://community.graylog.org/t/graylog-does-not-open-port-9000-after-upgrade-5-0-13-5-1-13/37025 "2026-02-26T07:17:34Z")
Hi! 1. Describe your incident: After the upgrade of Graylog 5.0.13 to 5.1.13, the service does start, but never open port 9000 and does not join the cluster. The logfile ends with: INFO \[ElasticsearchVersionProvider\]… --- ## [Running Graylog on AWS ECS](https://community.graylog.org/t/running-graylog-on-aws-ecs/37001)
**Author:** [@rsailopal](https://community.graylog.org/u/rsailopal)\ **Replies:** 2\ **Last updated:** [February 17, 2026, 12:36pm UTC](https://community.graylog.org/t/running-graylog-on-aws-ecs/37001 "2026-02-17T12:36:39Z")
Hi, We’re assessing the possibility of running Graylog on AWS ECS and were interested in discovering other people’s experience running the same setup. There are guides on running Graylog on Docker which we have trialle… --- ## [Send graylog logs to wazuh manager](https://community.graylog.org/t/send-graylog-logs-to-wazuh-manager/36778)
**Author:** [@Mrhyshelby](https://community.graylog.org/u/Mrhyshelby)\ **Replies:** 2\ **Last updated:** [December 22, 2025, 5:00pm UTC](https://community.graylog.org/t/send-graylog-logs-to-wazuh-manager/36778 "2025-12-22T17:00:24Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Can't connect to web interface after upgrade to 6.0](https://community.graylog.org/t/cant-connect-to-web-interface-after-upgrade-to-6-0/36673)
**Author:** [@dannymccaslin](https://community.graylog.org/u/dannymccaslin)\ **Replies:** 10\ **Last updated:** [December 3, 2025, 2:01pm UTC](https://community.graylog.org/t/cant-connect-to-web-interface-after-upgrade-to-6-0/36673 "2025-12-03T14:01:15Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Need Advice on Scaling Graylog Open 6.x – Hitting Performance and Storage Limits](https://community.graylog.org/t/need-advice-on-scaling-graylog-open-6-x-hitting-performance-and-storage-limits/36444)
**Author:** [@Golobolus](https://community.graylog.org/u/Golobolus)\ **Replies:** 1\ **Last updated:** [October 8, 2025, 5:44pm UTC](https://community.graylog.org/t/need-advice-on-scaling-graylog-open-6-x-hitting-performance-and-storage-limits/36444 "2025-10-08T17:44:47Z")
Hi Everyone, We’re currently running Graylog Open 6.x, and over time our log ingestion has grown significantly — from around 10GB/month to roughly 100–200GB/month today. Our current setup is a single VM running all Gra… --- ## [Single Web Interface for Multiple Graylog Clusters](https://community.graylog.org/t/single-web-interface-for-multiple-graylog-clusters/36258)
**Author:** [@aniketC](https://community.graylog.org/u/aniketC)\ **Replies:** 0\ **Last updated:** [August 25, 2025, 5:12pm UTC](https://community.graylog.org/t/single-web-interface-for-multiple-graylog-clusters/36258 "2025-08-25T17:12:22Z")
1. Situation: I have a multi-node Graylog cluster with about 25 nodes that ingests around 23–24TB of logs per day. As our environment grows and new services are added, the volume of logs keeps increasing, which forces us… --- ## [OpenSearch 2.19.1 compatibility with Graylog in Wazuh Indexer deployment](https://community.graylog.org/t/opensearch-2-19-1-compatibility-with-graylog-in-wazuh-indexer-deployment/36232)
**Author:** [@Som-gif](https://community.graylog.org/u/Som-gif)\ **Replies:** 1\ **Last updated:** [August 19, 2025, 8:34am UTC](https://community.graylog.org/t/opensearch-2-19-1-compatibility-with-graylog-in-wazuh-indexer-deployment/36232 "2025-08-19T08:34:36Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Unable to run more than 1 datanode in a cluster, other datanodes are showing as unavailable](https://community.graylog.org/t/unable-to-run-more-than-1-datanode-in-a-cluster-other-datanodes-are-showing-as-unavailable/36067)
**Author:** [@duxieking](https://community.graylog.org/u/duxieking)\ **Replies:** 14\ **Last updated:** [July 29, 2025, 6:05am UTC](https://community.graylog.org/t/unable-to-run-more-than-1-datanode-in-a-cluster-other-datanodes-are-showing-as-unavailable/36067 "2025-07-29T06:05:03Z")
1. Describe your incident: I have standard 3 graylog servers and 3 datanodes. During the pre-flight I can only add 1 datanode, as if I have 3 datanodes, they all create their own clusters and break. I have now created … --- ## [Graylog Enterprise License Violation can resolve](https://community.graylog.org/t/graylog-enterprise-license-violation-can-resolve/35944)
**Author:** [@long.nguyen15](https://community.graylog.org/u/long.nguyen15)\ **Replies:** 14\ **Last updated:** [July 9, 2025, 1:54pm UTC](https://community.graylog.org/t/graylog-enterprise-license-violation-can-resolve/35944 "2025-07-09T13:54:10Z")
I have an issue about graylog license, in the morning i had change DNS on server ubuntu running graylog and after i have this alert: Graylog Enterprise License Violation i had change DNS to 8.8.8.8 and graylog still … --- ## [Wazuh Integration With Graylog](https://community.graylog.org/t/wazuh-integration-with-graylog/35503)
**Author:** [@Akhtar](https://community.graylog.org/u/Akhtar)\ **Replies:** 6\ **Last updated:** [May 22, 2025, 6:50pm UTC](https://community.graylog.org/t/wazuh-integration-with-graylog/35503 "2025-05-22T18:50:15Z")
Hi everyone! I am looking for guidance on integrating Wazuh with Graylog. I couldn’t find any official documentation related to this integration, so I wanted to ask here: Is it possible to integrate Wazuh with Graylog… --- ## ["Authentication Finally Failed"](https://community.graylog.org/t/authentication-finally-failed/35407)
**Author:** [@mc114](https://community.graylog.org/u/mc114)\ **Replies:** 6\ **Last updated:** [April 22, 2025, 1:32pm UTC](https://community.graylog.org/t/authentication-finally-failed/35407 "2025-04-22T13:32:51Z")
1. Describe your incident: After running for 10 minutes, my leader graylgo node starts throwing authentication errors against my two Graylog-Datanode backend servers. There is a string of Java errors beginning with: g… --- ## [Authentication on the Datanode HTTPS](https://community.graylog.org/t/authentication-on-the-datanode-https/35323)
**Author:** [@3isenHeiM](https://community.graylog.org/u/3isenHeiM)\ **Replies:** 9\ **Last updated:** [April 1, 2025, 1:38pm UTC](https://community.graylog.org/t/authentication-on-the-datanode-https/35323 "2025-04-01T13:38:27Z")
I’m trying to setup a standalone instance, and to avoid the pre-flight checks. I’ve successfully provisionned certificate for my Datanode and it’s starting correctly. It listens on 127.0.0.1:9200. In the server.conf (o… --- ## [Deploy Graylog Open 6.1 Environment](https://community.graylog.org/t/deploy-graylog-open-6-1-environment/35259)
**Author:** [@DoubleM](https://community.graylog.org/u/DoubleM)\ **Replies:** 1\ **Last updated:** [March 19, 2025, 9:45am UTC](https://community.graylog.org/t/deploy-graylog-open-6-1-environment/35259 "2025-03-19T09:45:24Z")
Hi Community, I am curious about deploying Graylog Open 6.1. with Data-Node instead of OpenSearch. As I understood so far, data-node is an integral function as search backend and replaces the functionality of Opensearch… --- ## [Quick Fix - bypass expired Cert to view lidices on Opensearch](https://community.graylog.org/t/quick-fix-bypass-expired-cert-to-view-lidices-on-opensearch/35187)
**Author:** [@Jeffrey](https://community.graylog.org/u/Jeffrey)\ **Replies:** 4\ **Last updated:** [March 17, 2025, 10:34am UTC](https://community.graylog.org/t/quick-fix-bypass-expired-cert-to-view-lidices-on-opensearch/35187 "2025-03-17T10:34:35Z")
Sorry wasn’t sure what to tag here. Currently I cannot view any of my logs once they have been passed to Opensearch. Ican open greylog UI and have not problem there. ‘ERROR \[VersionProbe\] Unable to retrieve version fro… --- ## [Graylog HA - Failed to call API on node](https://community.graylog.org/t/graylog-ha-failed-to-call-api-on-node/35151)
**Author:** [@dawidsniegon](https://community.graylog.org/u/dawidsniegon)\ **Replies:** 1\ **Last updated:** [March 14, 2025, 5:56am UTC](https://community.graylog.org/t/graylog-ha-failed-to-call-api-on-node/35151 "2025-03-14T05:56:57Z")
1. Describe your incident: 2025-03-07 10:57:17,856 WARN : org.graylog2.shared.rest.resources.ProxiedResource - Failed to call API on node \<4cafb399-387b-4b90-9116-2f7deac188b2\>, cause: timeout (duration: 1003 ms) 2025-0… --- ## [Question about configuration of OpenSearch cluster](https://community.graylog.org/t/question-about-configuration-of-opensearch-cluster/34902)
**Author:** [@peaile](https://community.graylog.org/u/peaile)\ **Replies:** 8\ **Last updated:** [February 13, 2025, 9:45am UTC](https://community.graylog.org/t/question-about-configuration-of-opensearch-cluster/34902 "2025-02-13T09:45:04Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Error " could not retrive event definitions " error in alert page](https://community.graylog.org/t/error-could-not-retrive-event-definitions-error-in-alert-page/34880)
**Author:** [@genevio](https://community.graylog.org/u/genevio)\ **Replies:** 1\ **Last updated:** [February 7, 2025, 12:45pm UTC](https://community.graylog.org/t/error-could-not-retrive-event-definitions-error-in-alert-page/34880 "2025-02-07T12:45:36Z")
Describe your incident: Error " could not retrive event definitions " error in alert page . We have created an alert and after that the Email started flowing more which stopped out entire Alert page to be crashed , I w… --- ## [Graylog Possibilities](https://community.graylog.org/t/graylog-possibilities/34828)
**Author:** [@Louis1](https://community.graylog.org/u/Louis1)\ **Replies:** 2\ **Last updated:** [February 3, 2025, 1:30pm UTC](https://community.graylog.org/t/graylog-possibilities/34828 "2025-02-03T13:30:06Z")
I am training to be an IT specialist for system integration and am currently preparing for my final project. I chose Graylog because we already use it in our company and I like working with monitoring. In order to not ju… --- ## [Sizing - how many cores do I \*really\* need for a small setup? And can I setup storage in a separate disk?](https://community.graylog.org/t/sizing-how-many-cores-do-i-really-need-for-a-small-setup-and-can-i-setup-storage-in-a-separate-disk/34427)
**Author:** [@ZPrime](https://community.graylog.org/u/ZPrime)\ **Replies:** 1\ **Last updated:** [December 14, 2024, 3:53am UTC](https://community.graylog.org/t/sizing-how-many-cores-do-i-really-need-for-a-small-setup-and-can-i-setup-storage-in-a-separate-disk/34427 "2024-12-14T03:53:16Z")
Hello Graylog community! I’m trying to setup a new environment. Initially, we are going to see far below 1GB/day of logs. I’ve watched an older video about the Graylog Reference Architecture, but it doesn’t go very dee… --- ## [Proccess Buffer Full, Slow Output, Journaling](https://community.graylog.org/t/proccess-buffer-full-slow-output-journaling/33780)
**Author:** [@fsv](https://community.graylog.org/u/fsv)\ **Replies:** 7\ **Last updated:** [October 8, 2024, 11:44am UTC](https://community.graylog.org/t/proccess-buffer-full-slow-output-journaling/33780 "2024-10-08T11:44:06Z")
We are using Graylog 6.x on CentOS. This specific node has 24 CPUs and 24GB RAM on an SSD storage and is part of a 3 node Graylog cluster where each node is also a Mongo node. There is no load balancing in play here, … --- ## [Architecture question re cluster and replica set with single node each](https://community.graylog.org/t/architecture-question-re-cluster-and-replica-set-with-single-node-each/33654)
**Author:** [@Marzigliano](https://community.graylog.org/u/Marzigliano)\ **Replies:** 1\ **Last updated:** [September 26, 2024, 7:45am UTC](https://community.graylog.org/t/architecture-question-re-cluster-and-replica-set-with-single-node-each/33654 "2024-09-26T07:45:20Z")
Working on designing our first Graylog implementation. We’re starting with two VMs as a proof of concept and plan to expand later on to the six VM architecture. Should we configure both the OpenSearch cluster and the Mon… --- ## [Error - Feature not supported when use DocumentDb as database](https://community.graylog.org/t/error-feature-not-supported-when-use-documentdb-as-database/33500)
**Author:** [@Jeffersondvm](https://community.graylog.org/u/Jeffersondvm)\ **Replies:** 3\ **Last updated:** [September 12, 2024, 2:40pm UTC](https://community.graylog.org/t/error-feature-not-supported-when-use-documentdb-as-database/33500 "2024-09-12T14:40:50Z")
When implementing Graylog using AWS DocumentDB as the database, I receive the following log message: Feature not supported: capped. My current Graylog version is 5.2.4 and DocumentDB version is 5.0.0. This error occurs… --- ## [Error: \[type=illegal\_argument\_exception, reason=key \[types\] while integrating wazuh indexer (opensearch) to graylog](https://community.graylog.org/t/error-type-illegal-argument-exception-reason-key-types-while-integrating-wazuh-indexer-opensearch-to-graylog/33463)
**Author:** [@lioson](https://community.graylog.org/u/lioson)\ **Replies:** 1\ **Last updated:** [September 9, 2024, 8:27am UTC](https://community.graylog.org/t/error-type-illegal-argument-exception-reason-key-types-while-integrating-wazuh-indexer-opensearch-to-graylog/33463 "2024-09-09T08:27:09Z")
Hello community, I have setup Graylog version 6.0.6+4aa664f with Opensearch v2.16.0 on Ubuntu. i followed the official documentation and installed Graylog, then i integrated it with Wazuh indexer which runs on Opensearc… --- ## [Graylog sidecar error on windows 32bit](https://community.graylog.org/t/graylog-sidecar-error-on-windows-32bit/33244)
**Author:** [@qzvt](https://community.graylog.org/u/qzvt)\ **Replies:** 4\ **Last updated:** [August 15, 2024, 2:13am UTC](https://community.graylog.org/t/graylog-sidecar-error-on-windows-32bit/33244 "2024-08-15T02:13:38Z")
I’m try to install graylog-sidecar on windows server 32bit but I got this error. I have try version 1.2, 1.3, 1.4, 1.5 but no luck. I have download file from Releases · Graylog2/collector-sidecar · GitHub Anyone hav… [Next page](https://community.graylog.org/tag/architecture/97.md?match_all_tags=true&page=1&tags%5B%5D=architecture)