I have a 3 node Graylog cluster, two nodes have both Graylog server and
elastcisearch installed, the other has only elastcisearch installed, and I
am having difficultly understanding where to place the elasticsearch
configuration information. Should it be placed in the server.conf file or
in the elasticsearch.yml?
If the elasticsearch configuration should be placed in the server.conf
file what information needs to be placed in the elastcisearch.yml file?
The only way that I can get Graylog to operate is to have the cluster name,
the node name, the network hostname and the zen discovery hosts in both
files, but I end up with 5 elasticsearch clusters instead of three. 2 of
the elasticsearch clusters are advertised by the server.conf file
configuration and three by the elastcisearch.yml configuration.
See results below:
curl 'server1:9200/_cat/nodes?v'
host ip heap.percent ram.percent load node.role master name
10.85.7.187 10.85.7.187 62 76 0.75 c -
graylog-cc56d951(exposed by server.conf)
10.42.2.31 10.42.2.31 3 98 0.04 - -
server3 (exposed by elasticsearch.yml)
10.42.2.21 10.42.2.21 51 70 3.02 c -
graylog-efba9df3(exposed by server.conf)
10.42.2.21 10.42.2.21 9 70 3.02 d m
server1 (exposed by elasticsearch.yml)
10.85.7.187 10.85.7.187 11 76 0.75 d *
server2 (exposed by elasticsearch.yml)
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/7f0856ab-2fc4-468d-8ed6-cb87b97d1766%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
