search

Graylog2 / docker-compose

A set of Docker Compose files that allow you to quickly spin up a Graylog instance for testing or demo purposes.
Apache License 2.0
415 stars 141 forks source link

How to access graylog-datanode's API to reschedule shards? #70

Closed f0o closed 3 months ago

f0o commented 3 months ago

I've got a bunch of failing shards that I'd like to investigate through _cluster/allocation/explain and possibly cause rescheduling.

However I keep getting authentication finally failed when curling the datanode:9200.

What are the credentials for the node or where are they stored?

moesterheld commented 3 months ago

If you are using Graylog/Data node 6.0, you can go to System/Data node/Configuration and generate a client certificate to use for calling the datanode OS api. Or, as an alternative, you can use the Graylog endpoint which proxies calls to the api with a regular Graylog authentication token: api/datanodes/any/opensearch/_cluster/allocation/explain

f0o commented 3 months ago

Did not know that graylog can proxy my calls - will give it a shot!

f0o commented 3 months ago

Marking as resolved - easier to use the graylog instance as proxy :)