I have looked this group over and did some Google searches to no avail. My question is, at what point do you consider using a clustered setup vs. a single server instance? I know it's based off of how many servers and devices will be reporting to the server but I can't find any info that suggests "Well if you have this many devices and servers reporting in then you should consider having this many nodes, and this many graylog instances, etc., etc."
I want to make sure that I build out the correct solution. I don't want to go overkill and over estimate, but I don't want to under estimate as well. Any documentation or websites discussing this would be most helpful. Thanks. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/4da210f3-83ca-4a54-8456-694beaafe6e8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.