[graylog2] Re: system/nodes only showing one graylog server
Hi, It seems after all everything was fine, it only took time for the cluster to be stable. After a couple hours, I see all 3 graylog-servers in the web interface. Jeremy On Thursday, December 29, 2016 at 1:48:45 PM UTC+1, Jeremy Monnet wrote: > > Hi, > > I think you misunderstood me, I use only graylog-ctl directives to setup > the cluster (see first post in this thread), and when I say "I foudn this", > I do not mean "I wrote this by hand" but rather "reconfigure did it on its > own", so as far as I know (but I do not know much), I stuck to the > multi-vm-setup procedure. > > Jeremy > > On Thursday, December 29, 2016 at 1:36:58 PM UTC+1, Jochen Schalanda wrote: >> >> Hi Jeremy, >> >> On Thursday, 29 December 2016 12:14:01 UTC+1, Jeremy Monnet wrote: >>> >>> I have found in the setup >>> /opt/graylog/conf/graylog.conf:266:mongodb_uri = >>> mongodb://IP2323:27017/graylog >>> on nodes 2 and 3, is that enough ? >>> >> >> The Graylog configuration file will be overwritten when you run graylog-ctl >> reconfigure. Please stick to the procedures outlined in >> http://docs.graylog.org/en/2.1/pages/configuration/graylog_ctl.html#multi-vm-setup >> . >> >> Cheers, >> Jochen >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f5cac9fe-5790-4ce9-87a1-00c53ac3be59%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: system/nodes only showing one graylog server
Hi, I think you misunderstood me, I use only graylog-ctl directives to setup the cluster (see first post in this thread), and when I say "I foudn this", I do not mean "I wrote this by hand" but rather "reconfigure did it on its own", so as far as I know (but I do not know much), I stuck to the multi-vm-setup procedure. Jeremy On Thursday, December 29, 2016 at 1:36:58 PM UTC+1, Jochen Schalanda wrote: > > Hi Jeremy, > > On Thursday, 29 December 2016 12:14:01 UTC+1, Jeremy Monnet wrote: >> >> I have found in the setup >> /opt/graylog/conf/graylog.conf:266:mongodb_uri = >> mongodb://IP2323:27017/graylog >> on nodes 2 and 3, is that enough ? >> > > The Graylog configuration file will be overwritten when you run graylog-ctl > reconfigure. Please stick to the procedures outlined in > http://docs.graylog.org/en/2.1/pages/configuration/graylog_ctl.html#multi-vm-setup > . > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/54bbb55b-59ca-4038-8f6f-fe24cbc50c20%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: system/nodes only showing one graylog server
Hi, I have found in the setup /opt/graylog/conf/graylog.conf:266:mongodb_uri = mongodb://IP2323:27017/graylog on nodes 2 and 3, is that enough ? Jeremy On Thursday, December 29, 2016 at 12:11:40 PM UTC+1, Jeremy Monnet wrote: > > Hi, > > Yes, I understood that, and I think that works as I have setup the ldap > authentication only once on the master, and I can connect with my ldap > account on all 3 nodes. Is there a way to verify that part of configuration > anyway ? > > Thanks, > > Jeremy > > > On Thursday, December 29, 2016 at 11:07:06 AM UTC+1, Jochen Schalanda > wrote: >> >> Hi Jeremy, >> >> multi-node setups with the OVA are described at >> http://docs.graylog.org/en/2.1/pages/configuration/graylog_ctl.html#multi-vm-setup >> . >> >> All Graylog nodes have to have access to the same MongoDB database in >> order for the cluster work. >> >> Cheers, >> Jochen >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ef0836d2-6613-4224-bf8d-b39ead320a0c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: system/nodes only showing one graylog server
Hi, Yes, I understood that, and I think that works as I have setup the ldap authentication only once on the master, and I can connect with my ldap account on all 3 nodes. Is there a way to verify that part of configuration anyway ? Thanks, Jeremy On Thursday, December 29, 2016 at 11:07:06 AM UTC+1, Jochen Schalanda wrote: > > Hi Jeremy, > > multi-node setups with the OVA are described at > http://docs.graylog.org/en/2.1/pages/configuration/graylog_ctl.html#multi-vm-setup > . > > All Graylog nodes have to have access to the same MongoDB database in > order for the cluster work. > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/62ca131d-5c71-4f05-8dd8-5bf2565aad81%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: system/nodes only showing one graylog server
Hi Jeremy, multi-node setups with the OVA are described at http://docs.graylog.org/en/2.1/pages/configuration/graylog_ctl.html#multi-vm-setup . All Graylog nodes have to have access to the same MongoDB database in order for the cluster work. Cheers, Jochen On Thursday, 29 December 2016 10:49:26 UTC+1, Jeremy Monnet wrote: > > Hi, > > I upgraded from 1.x to 2.X and keeping the data, the procedure went > smoothly I guess, everything worked as expected. Now, I have 3 appliances > configured, one as a master, 2 as graylog/elasticsearch. When I look at the > nodes in elasticsearch, I see all 6 nodes, 3 data nodes and 3 > graylog-servers. But in system->nodes I only see the master. Detailed below > the graylog-ctl commands I issued to setup the cluster, I probably missed > something obvious, but I cannot see what... > > root@XX01:~# curl 'http://17.XXX.XXX.3:9200/_cat/nodes' > 17.XXX.XXX.30 17.XXX.XXX.30 38 98 0.21 d m Fatale > 10.XXX.XXX.6 10.XXX.XXX.6 38 98 0.21 c - graylog-XX02 > 17.XXX.XXX.3 17.XXX.XXX.3 69 98 0.03 d * Daniel Rand > 10.XXX.XXX.1 10.XXX.XXX.1 26 98 0.03 c - graylog-XX01 > 10.XXX.XXX.7 10.XXX.XXX.7 27 98 0.10 c - graylog-XX03 > 17.XXX.XXX.1 17.XXX.XXX.1 27 98 0.10 d m Hardnose > > > > # Reconfigure and Reboot: > # on the master > vi /etc/graylog/graylog-services.json # enable all services > graylog-ctl set-external-ip IP23 > graylog-ctl set-listen-address --service web --address http://IP23:9000 > graylog-ctl set-listen-address --service rest --address > http://IP23:9000/api/ > graylog-ctl set-admin-password xx > graylog-ctl set-timezone Europe/Paris > graylog-ctl set-node-id node1 > graylog-ctl set-server-secret XXX > graylog-ctl reconfigure > reboot > > # first client > vi /etc/graylog/graylog-services.json # enable etcd elasticsearch > graylog-server > graylog-ctl set-external-ip IP30 > graylog-ctl set-listen-address --service web --address http://IP30:9000 > graylog-ctl set-listen-address --service rest --address > http://IP30:9000/api/ > graylog-ctl set-admin-password xx > graylog-ctl set-timezone Europe/Paris > graylog-ctl set-node-id node2 > graylog-ctl set-server-secret XXX > graylog-ctl set-cluster-master IP23 > graylog-ctl reconfigure > reboot > > #second client > vi /etc/graylog/graylog-services.json # enable etcd elasticsearch > graylog-server > graylog-ctl set-external-ip IP31 > graylog-ctl set-listen-address --service web --address http://IP31:9000 > graylog-ctl set-listen-address --service rest --address > http://IP31:9000/api/ > graylog-ctl set-admin-password xx > graylog-ctl set-timezone Europe/Paris > graylog-ctl set-node-id node3 > graylog-ctl set-server-secret XXX > graylog-ctl set-cluster-master IP23 > graylog-ctl reconfigure > reboot > > Now is there anything I could do ? > > Thanks, > > Jeremy > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2565d0d1-9a21-4827-92d0-f0157e58212f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
