Incoming Logs in the cluster...

[teirekos]

I have a 3 node cluster running ver. 2015R2.1

All 43 hosts are sending the logs (using the IP) in my 1st node NagiosLogServer1.
Due to some memory issues ( we have discussed this in another post) both logstash and elasticsearch services fail in this server.
I was under the impression that when logstash is off in this node then there are no incoming logs in the cluster. Is this true?
I am asking this because when I enter the GUI in the other 2 nodes then I get that the "Receiving logs from 43 hosts"...
Thanx.

[jolson]

The 'Receiving logs from X hosts' message can occasionally be outdated. Typically, Nagios Log Server does a query back 24 hours and counts all unique hosts in that period.

Do you see any logs coming in if you click on the 'Dashboard' section of the NLS GUI?

[teirekos]

Thanx for the info.
Pls close this thread.