Page 1 of 1

additional logstash on different server?

Posted: Wed Oct 12, 2016 3:26 am
by _asp_
Hi,

we have licensed a single instance of logserver.

Is it possible and aggreed to the license to install a second logstash on a different server which will also ship the data to logserver's elasticsearch?
If so, what do I need to to to access the logstash? By default I cannot reach elasticsearch's port 9200 from other computers.

Thanks, Andreas

Re: additional logstash on different server?

Posted: Wed Oct 12, 2016 9:34 am
by rkennedy
It is possible, but this is beyond the scope for what we can support. Could you explain a bit more about your use case?

Generally speaking, if you're looking for another collector at a separate location I would look at setting up a rsyslog forwarder.

Re: additional logstash on different server?

Posted: Tue Oct 25, 2016 4:19 am
by _asp_
Sorry for my late response.

My usecase is to access elastic search from another server.

For Example using curl from a different computer to get some data by scripts.

Another point I wanted to try Is to connect with kibana 4.1. (which is supported with elasticsearch 1.6) to NLS' elasticsearch. I only know NLS1 and Kibana 4.5 yet, and I wanted to know when some of the better aggregations can already be done with 4.1.

I know that you will not support kibana 4.1., but I hope you can enable me to connect to elasticsearch's port vi curl.
Are there firewall rules on linux to be set, do I need to configure elasticsearch another way that it can be reached from another server than localhost?

Thanks, Andreas

Re: additional logstash on different server?

Posted: Tue Oct 25, 2016 9:14 am
by rkennedy
Another point I wanted to try Is to connect with kibana 4.1. (which is supported with elasticsearch 1.6) to NLS' elasticsearch. I only know NLS1 and Kibana 4.5 yet, and I wanted to know when some of the better aggregations can already be done with 4.1.

I know that you will not support kibana 4.1., but I hope you can enable me to connect to elasticsearch's port vi curl.
Are there firewall rules on linux to be set, do I need to configure elasticsearch another way that it can be reached from another server than localhost?
You should be able to do this based on the capabilities of the ELK stack, but it's beyond what we can support for NLS. NLS is bundled with the specific versions that are meant to work together.

We simply cannot support modified installations of the components.