First off I wanted stay, thanks so much for all the assistance while I have been working with graylog. Great product and help.
On to my question. I have a graylog server that is only doing graylog and mongodb that I spun up from the ova. I have setup two seperate ova instances to be elasticsearch nodes only. My question is, when the logs come in to the graylog server (Just from windows at the moment) are they stored on the graylog server, or do I need to add space to the elasticsearch nodes? I am getting confused about elasticsearch in this equation and the indices page. Even after reading info in Elasticsearch's home website it's still fuzzy after I read it. Just want to ensure that I have the correct amount of hard drive space for each node in the cluster. FYI: I have expanded the graylog server's HD to 100gigs since I figured that's where the logs are being kept. Just wanting to make sure that I am right in this assumption. Thank you in advance for all your help. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/328a7b66-d7a8-4ae1-905c-5c418b9b66e3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
