[graylog2] Re: does multiple graylog-server need a different node-id on cluster?

2016-09-29 Thread Niraj Kothari
Hi,

   We are having issues with Multi node graylog servers. We see that both 
nodes (one is master and the other one is slave) are not consuming data. 
Instead only one is consuming. Should only of the 2 Graylog servers consume 
the data or can both consume?

Thanks

On Tuesday, December 15, 2015 at 1:12:27 AM UTC-8, Jochen Schalanda wrote:
>
> Hi,
>
> each Graylog node *must* use its own node ID. Additionally, only one of 
> those three Graylog nodes can be master (is_master setting in the 
> configuration file).
>
>
> Cheers,
> Jochen
>
> On Monday, 14 December 2015 06:00:08 UTC+1, chen rui wrote:
>>
>> I would like to create a HA log system, utilize 3 
>> *graylog-server(including mongodb+graylog-web) and 3*elasticsearch
>> I have been setup the first one graylog-server node(graylog-srv1) and 
>> work well, and I would like to clone another two node(graylog-srv2 and 
>> graylog-srv3).
>> but I am confused if I should change the node-id on the graylog-srv2 and 
>> graylog-srv3?
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/b77f25ae-c784-4fd2-a295-d45460d98176%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Warning error related to Transport response

2016-09-29 Thread Kunal Patil
​Hello

Getting below error on server log

WARN  [transport] [graylog-72d3fb99-5cf6-4c41-9e67-55237496e694] Transport
response handler not found of id [5267]


please suggest
i have graylog 2.1 installed
on standalone server​




*REGARDS:KUNAL VIKAS PATIL9860265594*

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAJa2o%3D8DqL2VM68SQqCnGLr4cwSVfM3J_uTJEet9onbvMHK3Vw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Do I need Elasticsearch installed on Graylog server for a multi-node setup?

2016-09-29 Thread Jochen Schalanda
Hi Adam,

the elasticsearch_discovery_zen_ping_unicast_hosts and 
elasticsearch_network_host settings are wrong, see  
http://docs.graylog.org/en/2.1/pages/configuration/elasticsearch.html#network-setup
.

Also take a close look at the network.host setting in your Elasticsearch 
configuration and make sure that it's using the correct network interface 
(refer to 
http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html
).

Cheers,
Jochen

On Thursday, 29 September 2016 11:35:42 UTC+2, Adam wrote:
>
> Hi,
>
> I've taken another look at the config files, but I graylog-server still 
> won't join the ES cluster as a client node and I can't get to the web 
> interface.
>
> Here's the process I've run through to deploy so far:
>
>
>1. Deployed three ES nodes which are all present and configured as a 
>cluster.  I can see each node is both a master and data node in Kopf.
>2. Deployed a new server to run graylog-server and used the deb 
>package to deploy.
>3. Configured the graylog-server server.conf file to connect to the 
>existing ES cluster, but I can't see the graylog-server node in Kopf or 
>connect to the web interface.
>
>
> I've put the config files on pastebinam I doing something obviously 
> wrong?  I've also added the server.log file.
>
>
>- Elasticsearch config file - http://pastebin.com/DWFS24mJ
>- Graylog config file - http://pastebin.com/D9fcaU9D
>- Graylog server.log - http://pastebin.com/TXMex7dL
>
> Thanks for your help; I must be missing something simple.
>
> Adam
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/93864c9d-4b4e-454d-ad79-f12d12e36c37%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Do I need Elasticsearch installed on Graylog server for a multi-node setup?

2016-09-29 Thread Adam
Hi,

I've taken another look at the config files, but I graylog-server still 
won't join the ES cluster as a client node and I can't get to the web 
interface.

Here's the process I've run through to deploy so far:


   1. Deployed three ES nodes which are all present and configured as a 
   cluster.  I can see each node is both a master and data node in Kopf.
   2. Deployed a new server to run graylog-server and used the deb package 
   to deploy.
   3. Configured the graylog-server server.conf file to connect to the 
   existing ES cluster, but I can't see the graylog-server node in Kopf or 
   connect to the web interface.
   

I've put the config files on pastebinam I doing something obviously 
wrong?  I've also added the server.log file.


   - Elasticsearch config file - http://pastebin.com/DWFS24mJ
   - Graylog config file - http://pastebin.com/D9fcaU9D
   - Graylog server.log - http://pastebin.com/TXMex7dL

Thanks for your help; I must be missing something simple.

Adam


-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/c4520a86-5240-4291-9002-b37e294b9f02%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Graylog cluster: using two different elasticsearch cluster

2016-09-29 Thread sangh
Thanks for the answer

if i have multiple data center on different location (one in paris, one in 
london) i want to collect their logs. i deploy a graylog cluster, mongodb 
cluster and an elasticsearch cluster. how can i ensure high availability ? 
i can make everything in one site and make the other one forward logs -> i 
might loose logs because of network problem
i can put each graylog in one site along with 3 machine of elasticsearch 
and mongodb -> i loose logs because the site with no master want work, or i 
endup with 2 cluster elasticsearch splitbrain ??




Le mercredi 28 septembre 2016 18:47:52 UTC+2, Jochen Schalanda a écrit :
>
> Hi,
>
> On Wednesday, 28 September 2016 17:47:01 UTC+2, sangh wrote:
>>
>> Is it possible to use two different elasticsearch cluster for a graylog 
>> cluster
>>
>
> That's currently not possible but planned for a future version of Graylog. 
> It will not make it into Graylog 2.2.x, though.
>
> Cheers,
> Jochen
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/90ee1239-9563-41c7-aeee-dc7da74cbf24%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.