Centralized Log Management

The default Logscape deployment is the Centralized Log Management. The main components in this deployment are the Manager and a bank of Forwarders.

The centralized deployment contains the following components.

Manager - The manager is the main Logscape component. The Manager coordinates the searching and indexing of the entire deployment and orchestrates the execution of data collection services across the deployment. The Manager also runs several other services responsible for collect data from Syslog clients, Tcp clients and Forwarders. The Manager also runs a web console call the dashboard on port 8080.

Index Store - The Index Store collects data from Forwarders, indexes the data and makes it available for search and analysis. In the default setup the Manager runs an Index Store on the same server.

Note: The Manager runs an Index Store

Forwarders - A Forwarder is a lightweight Logscape component which collects data and ships it to any of the available Index Stores. A Forwarder is installed on each host which has data that needs to imported into Logscape.

Configuration

The Centralized Log Management architecture is the default configuration when Logscape is first installed. After you have installed the Manager, any forwarder added to your environment will send data to the Index Store running on the manager.