Managing Cluster Roles

Introduction

This article discusses Logsign cluster role management.

Cluster Role Management

Each server in the Logsign cluster structure is assigned a specific role. These roles help each server in the cluster structure to perform a specific task. This enables the cluster structure to operate more efficiently and systematically.

Cluster role management is performed through the Logsign user interface. Different roles can be assigned for each server in the cluster structure in the management panel. For example, one server can be used to collect data, another server can be used to store data, and another server can be used to analyze data.

Cluster role management ensures efficient use of the resources of servers in the cluster structure and helps system administrators to change the roles of servers in the cluster structure to improve system performance.

mceclip0__4_.png

 

If there is excessive CPU usage on a node, we can distribute its roles to other nodes. In the example below, the parser service on the siem3 node is reduced, and the parser service on the siem2 node is increased.

mceclip1__3_.png

mceclip2__4_.png

mceclip3__4_.png

mceclip0__5_.png

mceclip5__3_.png

The configuration is saved with the "Save Plan" option, and the "apply_plan" script is run with the master node on the terminal screen.

Was this article helpful?
0 out of 0 found this helpful

Articles in this section

See more
Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.