I am on a very initial setup and I want to know if I can use ES offered by AWS as a service to the Graylog2?
I am quite sure this cannot be accomplished since AWS doesn't offer anything to configure.
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
Not having anything to configure would be a feature of cloud service...
You can try yourself by spinning instances of an ES domain and the official Graylog AMI, which is what I did.
The primary obstacle at the moment seems to be that AmazonES does not offer the TCP transport, and instead has only REST. It is not going to work without radical changes in Graylog's ES client.
A couple things you would need to line up between the two for this to theoretically work:
Elasticsearch itself has an EC2 discovery plugin, but it is not anticipated to be integrated into Graylog in the near term. Further, I don't think the EC2 features that discovery uses are exposed for the ES service, making it doubly unsupported.
Seems like you need to run your own cluster. At least there's graylog-ctl on the cloud images.