SO Production Deployment Thought Process #2026
-
|
I'm currently using SO in a lab but I got into a thought experiment about how production deployments would work. Say you wanted to use SO to monitor 2 separate organizations and send all the data back to 1 central management server. Is there a way to differentiate the organization data (like tag traffic) or is this idea not even recommended? |
Beta Was this translation helpful? Give feedback.
Answered by
dougburks
Nov 21, 2020
Replies: 1 comment
-
|
If you deploy a separate forward node for each organization, then each forward node tags the data with its hostname. This allows you to filter events based on what forward node they came from. |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
dougburks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
If you deploy a separate forward node for each organization, then each forward node tags the data with its hostname. This allows you to filter events based on what forward node they came from.