Leona
GitHubBlogs
  • Welcome to Leona!
  • Installation
    • Docker
    • Manual Setup
    • Log Collection
  • Tutorial
    • Quickstart
  • Configuration
    • Server Conf
    • Web Interface
    • Multi-Nodes
    • Index Model
    • Backup
    • The REST APIs
  • Security
    • Using ModSecurity
    • Logging User Activity
    • The URL Whitelist
    • Alerts And Events
  • Getting in
    • Log Sources
      • GELF
      • Beats
      • Ingest Logs Manually
        • Syslog
        • Journald
        • CEF
        • Raw or Plaintext
        • From Files
        • HTTP API
        • Application Data
      • Input
    • Sidecar
    • Forwarder
      • Forward Installation
      • Forward Configuration
  • Making sense
    • Pipelines
      • Rules
      • Functions
      • Use Cases
    • Streams
    • Enrichment
      • Lookup Tables
      • Geolocation
      • Data Adapters
  • Alerts & Notifications
    • Alerting By Example
    • Notifications
    • Leona Dashboard
  • Searching
    • Search Query Language
    • Time Frame Selector
  • Appendix
    • Support
    • License
    • Ecosystem
    • Contribute
    • Change Log
    • FAQs
Powered by GitBook
On this page
  • Requirements
  • MongoDB Replica Set
  • Elasticsearch Cluster
  • LeonaLog Multi-Node
  1. Configuration

Multi-Nodes

PreviousWeb InterfaceNextIndex Model

Last updated 2 years ago

It is important to consider the name of the new Elasticsearch cluster. In most cases, in fact, the default name should be changed to avoid conflicts. This guide doesn't provide a step-by-step tutorial for building a multi-node LeonaLog cluster but does give some advice on questions that might arise during the setup.

Requirements

Every server which is part of this setup has the software requirements installed to run the targeted software. All software requirements can be found in the installation manual.

We highly recommend that the system time on all systems is kept in sync via NTP or a similar mechanism. Needless to say that DNS resolution must be working, too.

In order to simplify the installation process, the servers should have a working Internet connection.

MongoDB Replica Set

We recommend .

Elasticsearch Cluster

The should help you to install Elasticsearch with a robust base configuration.

LeonaLog Multi-Node

After the installation of leona, you should take care that only one leona node is configured to be master with the configuration setting is_master = true.

The http_bind_address configured address needs to be reachable by all Graylog nodes in the cluster. The http_publish_uri is normally auto-generated from the http_bind_address. This URI is used for inter-node communication.

If the http_bind_address is configurated with 0.0.0.0 you must configure http_publish_uri. Otherwise leona will use the first non-loopback IP, what might not fit into your desired design.

deploying a MongoDB replica set
Elasticsearch setup documentation