13 Apr
2016
13 Apr
'16
4:38 p.m.
On Wed, Apr 13, 2016 at 11:32:47AM -0400, Scot Needy wrote:
NOTE: I do not believe some options like server,port,.. are needed in node mode.
correct: in node mode, almost everything is in the yaml
What is the relationship to the ES service and syslog-ng in node mode?
No direct relation in any mode: the ES data node runs in a different JVM on same or other node.
It looks like in node mode the es2 module write directly to the shard ?
Yes, syslog-ng runs an ES instance itself that joins the cluster of the other ES instance(s). It writes documents directly to the correct nodes.