10

GrayLog2 requires both ElasticSearch and MongoDB, while Logstash uses only ElasticSearch for persisting and searching the logs. what does mongo provide in graylog2?

Birla
  • 1,170
  • 11
  • 30
  • This was the first Google search result for `graylog2 mongodb`: http://alexey-palazhchenko.tumblr.com/post/5070526903/graylog2-and-its-mongodb-usage – WiredPrairie Jul 01 '13 at 10:55
  • The link you shared does not use Elastic Search at all, the config that I'm looking at uses Elastic Search for persistent storage. – Birla Jul 02 '13 at 06:28
  • What is your question then? `"What does mongo provide in graylog2?"` That blog post addressed the question as stated. – WiredPrairie Jul 02 '13 at 10:56
  • You cannot use ES as persistance layer, ES is a search engine, Mongo a database, they do what they are made for! – Thomas Decaux May 30 '14 at 13:42
  • Why the choice of mongo over mysql? Like was there a technical reason, or a performance reason, or perhaps it was just a preference? I've always been curios. – Rahim Khoja Jan 04 '18 at 02:16
  • 1
    @Canadian_Republican Mongo and MySQL are both DBMSes but quite different. Mongo is great when you have a lot of data and want to do on the fly computations. Perf is another factor, no table locks, no transactions. – Birla Apr 18 '18 at 17:00

1 Answers1

16

Graylog2 uses mongodb for the web interface entities. Streams, alerts, users, settings, cached stream counts etc. Pretty much everything you see and edit in the web interface except for the logs themselves.

Clarence
  • 2,944
  • 18
  • 16