---
title: "Mathias Brandstetter · 2026-10-30"
description: "My Proxmox lab’s logs were well kept and never read. Now Graylog reads them: three Data Nodes that never move, one server that moves when it has to, and every remote address in one field, so one searc"
url: https://vutuv.de/mathias_brandstetter/posts/01a18c5b-3ec2-73f7-b08e-6d29c582c1d7
type: post
schema_version: 3
generated_at: 2026-11-10T02:39:40Z
---

# Post by [Mathias Brandstetter](https://vutuv.de/mathias_brandstetter) · 2026-10-30

My Proxmox lab’s logs were well kept and never read. Now Graylog reads them: three Data Nodes that never move, one server that moves when it has to, and every remote address in one field, so one search follows one visitor everywhere.

Seven failure tests found a firewall that had never been on. A Data Node rebuild went from 39 minutes to 9.

Write-up and a 70-page PDF:\
https://www.behindtheconsole.com/2026/10/30/a-reader-for-the-archive-graylog-on-a-three-node-proxmox-cluster/

Verified webpages of the author linked here: behindtheconsole.com (whole website)

Tags: #proxmox, #graylog

Likes: 0 · Reposts: 0 · Bookmarks: 0