10

GrayLog2 requires both ElasticSearch and MongoDB, while Logstash uses only ElasticSearch for persisting and searching the logs. what does mongo provide in graylog2?

6
  • This was the first Google search result for graylog2 mongodb: alexey-palazhchenko.tumblr.com/post/5070526903/… Commented Jul 1, 2013 at 10:55
  • The link you shared does not use Elastic Search at all, the config that I'm looking at uses Elastic Search for persistent storage.
    – Birla
    Commented Jul 2, 2013 at 6:28
  • What is your question then? "What does mongo provide in graylog2?" That blog post addressed the question as stated. Commented Jul 2, 2013 at 10:56
  • You cannot use ES as persistance layer, ES is a search engine, Mongo a database, they do what they are made for! Commented May 30, 2014 at 13:42
  • 1
    @Canadian_Republican Mongo and MySQL are both DBMSes but quite different. Mongo is great when you have a lot of data and want to do on the fly computations. Perf is another factor, no table locks, no transactions.
    – Birla
    Commented Apr 18, 2018 at 17:00

1 Answer 1

16

Graylog2 uses mongodb for the web interface entities. Streams, alerts, users, settings, cached stream counts etc. Pretty much everything you see and edit in the web interface except for the logs themselves.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.