Cluster Configuration

The Cluster Configuration page provides a centralized, real-time view of all nodes in your deployment, offering critical insight into roles, processing states, and load balancer status. This visibility helps administrators monitor system health, troubleshoot performance issues, and make informed decisions during scaling or maintenance.

Graylog Node Management

Graylog nodes on the Cluster Configuration page display node roles, processing state, and load balancer status, offering critical insight into the overall health and availability of your environment.

Additionally, for each listed node, administrators can pause message processing or change a node's attainability status with an internal load balancer to a DEAD status, meaning that log messages will not be accepted from the load balancer into Graylog. This is done via the Actions menu by selecting More.

Hint: When paused, the process buffers will stop accepting new messages. However, if the message journal is enabled on the node (which is the default setting), Graylog will continue to persist incoming messages to disk. This ensures that no data is lost and processing can safely resume when the node is re-enabled.

Specific node metrics are also available from the Actions menu, including viewing all inputs running on the node, a thread dump of all active threads or process buffers, and recent system logs. Additionally, from this menu, you can access Graylog's REST API browser for the node selected. (Note that you can access Graylog's global API browser from the help menu at the top-right of the interface.)

Node Details

When you select a specific node from the list view, you will navigate to the Node Detail page for the selected node, which provides in-depth information about its status and performance. This view is essential for operational monitoring and troubleshooting, offering a snapshot of JVM resource usage, message throughput, disk journaling behavior, and installed components.

Data Node Management

Data Nodes on the Cluster Configuration page display node roles and node status. From the Actions menu, administrators can also renew Data Node certificates, stop or remove nodes, and display recent system logs.

Additionally, from this page, you can navigate to additional tabs for Data Node Management, including: 

  • Data Node Dashboard: This page displays additional performance metrics for each Data Node.

  • Data Node Certificate Management: From here you can issue or renew certificates for all Data Nodes in your cluster. See Manage Certificates with Data Node for more information.

  • Data Node Upgrade: Navigate to this page for guidance on upgrading your Data Nodes. See Upgrade Graylog for more information on this process.

Hint: If you have not yet migrated to Data Node as your search backend, note that the only tab visible for Data Node management will be Data Node Migration. See Data Node Migration for more information on this process.

OpenSearch Node Management

If you have deployed Graylog with OpenSearch as your search backend, note that you will also be able to view your OpenSearch cluster status from the Cluster Configuration page. This will include the overall status of your OpenSearch cluster including all active, initializing, relocating, and unassigned shards. See Cluster Status Explained for more information on what your status indicates for the overall health of your cluster.

Further Reading

Explore the following additional resources and recommended readings to expand your knowledge on related topics: