Hi,
I'm about to deploy log insight for a customer across two datacentres and looking to see if what I am suggesting is supported and looks right:
The customer has one vCenter managing about 10 hosts in head office and 2 hosts in a separate DC in another country. This second site *could* end up having a lot of endpoints generating a lot of logs.
I'm thinking that I will deploy Log Insight in cluster mode with a "master" in head office and one worker and another worker in the second DC. If the number of endpoints in the second site increases, I can add a second worker.
Does this sound about right? Is there any consideration around ingesters or load balancers - or do they get built in automatically?
Many Thanks!