additional logstash on different server?

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
Locked
_asp_
Posts: 91
Joined: Mon May 23, 2016 4:30 am

additional logstash on different server?

Post by _asp_ »

Hi,

we have licensed a single instance of logserver.

Is it possible and aggreed to the license to install a second logstash on a different server which will also ship the data to logserver's elasticsearch?
If so, what do I need to to to access the logstash? By default I cannot reach elasticsearch's port 9200 from other computers.

Thanks, Andreas
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: additional logstash on different server?

Post by rkennedy »

It is possible, but this is beyond the scope for what we can support. Could you explain a bit more about your use case?

Generally speaking, if you're looking for another collector at a separate location I would look at setting up a rsyslog forwarder.
Former Nagios Employee
_asp_
Posts: 91
Joined: Mon May 23, 2016 4:30 am

Re: additional logstash on different server?

Post by _asp_ »

Sorry for my late response.

My usecase is to access elastic search from another server.

For Example using curl from a different computer to get some data by scripts.

Another point I wanted to try Is to connect with kibana 4.1. (which is supported with elasticsearch 1.6) to NLS' elasticsearch. I only know NLS1 and Kibana 4.5 yet, and I wanted to know when some of the better aggregations can already be done with 4.1.

I know that you will not support kibana 4.1., but I hope you can enable me to connect to elasticsearch's port vi curl.
Are there firewall rules on linux to be set, do I need to configure elasticsearch another way that it can be reached from another server than localhost?

Thanks, Andreas
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: additional logstash on different server?

Post by rkennedy »

Another point I wanted to try Is to connect with kibana 4.1. (which is supported with elasticsearch 1.6) to NLS' elasticsearch. I only know NLS1 and Kibana 4.5 yet, and I wanted to know when some of the better aggregations can already be done with 4.1.

I know that you will not support kibana 4.1., but I hope you can enable me to connect to elasticsearch's port vi curl.
Are there firewall rules on linux to be set, do I need to configure elasticsearch another way that it can be reached from another server than localhost?
You should be able to do this based on the capabilities of the ELK stack, but it's beyond what we can support for NLS. NLS is bundled with the specific versions that are meant to work together.

We simply cannot support modified installations of the components.
Former Nagios Employee
Locked