This article discusses Logsign cluster role management.
Cluster Role Management
Each server in the Logsign cluster structure is assigned a specific role. These roles help each server in the cluster structure to perform a specific task. This enables the cluster structure to operate more efficiently and systematically.
Cluster role management is performed through the Logsign user interface. Different roles can be assigned for each server in the cluster structure in the management panel. For example, one server can be used to collect data, another server can be used to store data, and another server can be used to analyze data.
Cluster role management ensures efficient use of the resources of servers in the cluster structure and helps system administrators to change the roles of servers in the cluster structure to improve system performance.
If there is excessive CPU usage on a node, we can distribute its roles to other nodes. In the example below, the parser service on the siem3 node is reduced, and the parser service on the siem2 node is increased.
The configuration is saved with the "Save Plan" option, and the "apply_plan" script is run with the master node on the terminal screen.