question for yah.

[benhank]

How do I get NLS to give me a readout of the systems reporting to it?
For a special reason I cant use the query options. Does the server have some file that I can pull up?

[eloyd]

To my knowledge, since there is no setup required on the NLS side to send logs to it, there is no central config file or other repository besides the elasticsearch/logstash indices that contain that information. If you cannot run a query, and assuming you cannot mouse over the event list to see what shows up from "loghost," then you might need to look at network traffic to find out.

I'm sure someone know more than I do about this.

[slansing]

You can also take a look at Dashboards > Top sources and types, it will show you the list of remote hosts in the Host panel.

[eloyd]

For a special reason I cant use the query options. Does the server have some file that I can pull up?

I read this as wanting to accomplish this task from the command line, somehow. I suppose you could write a query URL and do it that way, too.

[tmcdonald]

I believe the "Retrieving logs from X hosts" is just looking at the count of unique hosts in the elasticsearch database. That's all I can think of since neither Logstash nor Elasticsearch really keep a tally on that sort of thing, so a query would be the only way.

[benhank]

Hey Thanks for the info T !.If no one else on the team has any other info, you can lock it up!