Configuring Multi-Cluster

Note

To enable Multi-Cluster search, the correct feature flags must be enabled on each cluster. See Enabling Multi-Cluster Feature Flags.

Multi-Cluster search is supported by creating a Multi-Cluster View. This is a special type of view that connects an optional local repo and one or more remote views or repositories and then aggregates to the searches to provide a single view of the data across multiple clusters.

Multi-Cluster views connect multiple repositories into a single view:

  • One local repository

  • One or more remote repositories

Creating a Multi-Cluster View is a multi-stage process:

  1. Create an API token for accessing a repository or view on each remote cluster. The API token created is unique to each cluster and repository combination.

  2. Create the multi-cluster view on a cluster. The multi-cluster view defines:

    • Multi-Cluster View Name

    • Remote cluster URL, API token and optional event filter to access the data.

You can create a Multi-Cluster View either using GraphQL, or through using the LogScale User Interface.