Log Distribution

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
Locked
parkprimus
Posts: 10
Joined: Fri May 29, 2015 3:33 pm

Log Distribution

Post by parkprimus »

My network has 2 datacenters and 10 wan sites. I don't want to place a log server at the datacenter then have all my devices log to it because of network load. What I wanted was to stand up log servers in my all my wan sites then have a central server that manages them all. Is that possible with this product?
jolson
Attack Rabbit
Posts: 2560
Joined: Thu Feb 12, 2015 12:40 pm

Re: Log Distribution

Post by jolson »

The difficulty here is that there is no such thing as a 'central server' when it comes to Nagios Log Server. There is what's known as a 'master' node, but it's one part of the same cluster.

If what you're asking is for a central GUI to view all of the logs on, then you will be happy to hear that by default, you can view all of your clusters logs from any single node in the cluster. What you could do is place one node at each WAN site and one in your central location, and use the central node to view all of your logs.

From your central node, you will certainly be able to define log collection configuration and settings that other servers in the cluster can inherit - in this sense, your central server can act as a 'management' server. That is my recommendation.
Twits Blog
Show me a man who lives alone and has a perpetually clean kitchen, and 8 times out of 9 I'll show you a man with detestable spiritual qualities.
parkprimus
Posts: 10
Joined: Fri May 29, 2015 3:33 pm

Re: Log Distribution

Post by parkprimus »

excellent! Is there a way to add a node to a cluster after the initial configuration has been done?
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: Log Distribution

Post by tmcdonald »

Absolutely. Once you visit the LS web page for the first time, it will guide you through setup and you can choose whether to start a new cluster or add it to an existing one via the cluster ID.

One thing to note is that, due to how logs are stored across the cluster, there might still be some network traffic generated since the query for searching for a particular log goes to all of the machines, and they will all return what they have. So if the machine whose web interface you visit does not contain the relevant logs, they will be shipped over the network from those that do.
Former Nagios employee
parkprimus
Posts: 10
Joined: Fri May 29, 2015 3:33 pm

Re: Log Distribution

Post by parkprimus »

Noway to do that after the fact?
jolson
Attack Rabbit
Posts: 2560
Joined: Thu Feb 12, 2015 12:40 pm

Re: Log Distribution

Post by jolson »

What do you mean after the fact? It's possible to have all logs stored on all servers so that the logs are locally cached, but it's not recommended due to the fact that you'd need exponentially more storage and computing power to do it this way.
Twits Blog
Show me a man who lives alone and has a perpetually clean kitchen, and 8 times out of 9 I'll show you a man with detestable spiritual qualities.
Locked