Hello,
I have some questions about the output configuration of winlogbeat.
Today, I have this for a windows server :
output.elasticsearch:
hosts: ["serverA:9200"]
I want to add another server in case of failure of serverA :
output.elasticsearch:
hosts: ["serverA:9200", "serverB:9200"]
According to the doc, it's a round robin mode, so if serverA is up, all datas will be sent to him, and if he's down, the data are sent to serverB.
But if serverA and serverB are in the same cluster, is it working ? No problem with that ?
Today, my configuration is serverA as a central point to host the data (it's a data node) and serverB is another data node in the same cluster.
So the data are replicated in this way : serverA => serverB
If server A is down, is serverB ships data to serverA when this one is up again ?
Thank you for your answers.