# Master-Slave architecture Log Collection and Mapping

**URL:** <https://discuss.elastic.co/t/master-slave-architecture-log-collection-and-mapping/319410>\
**Category:** Logstash\
**Created:** [November 21, 2022, 9:28am UTC](https://discuss.elastic.co/t/master-slave-architecture-log-collection-and-mapping/319410 "2022-11-21T09:28:54Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Poongkuyil\_Muse](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/poongkuyil_muse/32/101394_2.png) [@Poongkuyil\_Muse](https://discuss.elastic.co/u/Poongkuyil_Muse)\
**Post date:** [November 21, 2022, 9:28am UTC](https://discuss.elastic.co/t/master-slave-architecture-log-collection-and-mapping/319410/1 "2022-11-21T09:28:55Z")

</div>

I am able to retrieve apache web logs from one system and visualize them in kibana. However, we have more than one system that work as master-slave.

> My Scenario:  
> If there are 3 systems A,B,C  
> A - Master (IP1: 192.165.17.1)  
> B - Slave 1 (IP2: 192.165.17.2)  
> C - Slave 2 (IP3: 192.165.17.3)

In this setup, whenever system B access a webpage, the request is sent directly to the server (IP2). Similary whenever system C accesses a webpage, the request is sent directly to the server (IP3).

However, whenever a login page is accessed by either of the slaves, the request is sent by master IP1. And further page access are directly encountered by respective slaves.

> **Problem : Is there a way to find which slave is accessing the login page via master?**

I would like to visualize inferences of logs made from a master-slave architecture. I am new to this, and grateful to find any help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 19, 2022, 9:29am UTC](https://discuss.elastic.co/t/master-slave-architecture-log-collection-and-mapping/319410/2 "2022-12-19T09:29:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
