Hi Jeremy, multi-node setups with the OVA are described at http://docs.graylog.org/en/2.1/pages/configuration/graylog_ctl.html#multi-vm-setup .
All Graylog nodes have to have access to the same MongoDB database in order for the cluster work. Cheers, Jochen On Thursday, 29 December 2016 10:49:26 UTC+1, Jeremy Monnet wrote: > > Hi, > > I upgraded from 1.x to 2.X and keeping the data, the procedure went > smoothly I guess, everything worked as expected. Now, I have 3 appliances > configured, one as a master, 2 as graylog/elasticsearch. When I look at the > nodes in elasticsearch, I see all 6 nodes, 3 data nodes and 3 > graylog-servers. But in system->nodes I only see the master. Detailed below > the graylog-ctl commands I issued to setup the cluster, I probably missed > something obvious, but I cannot see what... > > root@XX01:~# curl 'http://17.XXX.XXX.3:9200/_cat/nodes' > 17.XXX.XXX.30 17.XXX.XXX.30 38 98 0.21 d m Fatale > 10.XXX.XXX.6 10.XXX.XXX.6 38 98 0.21 c - graylog-XX02 > 17.XXX.XXX.3 17.XXX.XXX.3 69 98 0.03 d * Daniel Rand > 10.XXX.XXX.1 10.XXX.XXX.1 26 98 0.03 c - graylog-XX01 > 10.XXX.XXX.7 10.XXX.XXX.7 27 98 0.10 c - graylog-XX03 > 17.XXX.XXX.1 17.XXX.XXX.1 27 98 0.10 d m Hardnose > > > > # Reconfigure and Reboot: > # on the master > vi /etc/graylog/graylog-services.json # enable all services > graylog-ctl set-external-ip IP23 > graylog-ctl set-listen-address --service web --address http://IP23:9000 > graylog-ctl set-listen-address --service rest --address > http://IP23:9000/api/ > graylog-ctl set-admin-password xxxxxxxxxxxxxx > graylog-ctl set-timezone Europe/Paris > graylog-ctl set-node-id node1 > graylog-ctl set-server-secret XXXXXXX > graylog-ctl reconfigure > reboot > > # first client > vi /etc/graylog/graylog-services.json # enable etcd elasticsearch > graylog-server > graylog-ctl set-external-ip IP30 > graylog-ctl set-listen-address --service web --address http://IP30:9000 > graylog-ctl set-listen-address --service rest --address > http://IP30:9000/api/ > graylog-ctl set-admin-password xxxxxxxxxxxxxx > graylog-ctl set-timezone Europe/Paris > graylog-ctl set-node-id node2 > graylog-ctl set-server-secret XXXXXXX > graylog-ctl set-cluster-master IP23 > graylog-ctl reconfigure > reboot > > #second client > vi /etc/graylog/graylog-services.json # enable etcd elasticsearch > graylog-server > graylog-ctl set-external-ip IP31 > graylog-ctl set-listen-address --service web --address http://IP31:9000 > graylog-ctl set-listen-address --service rest --address > http://IP31:9000/api/ > graylog-ctl set-admin-password xxxxxxxxxxxxxx > graylog-ctl set-timezone Europe/Paris > graylog-ctl set-node-id node3 > graylog-ctl set-server-secret XXXXXXX > graylog-ctl set-cluster-master IP23 > graylog-ctl reconfigure > reboot > > Now is there anything I could do ? > > Thanks, > > Jeremy > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2565d0d1-9a21-4827-92d0-f0157e58212f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
