I am in the process of setting things up “for real” and I have a question related to the overall layout, namely, how many environments to use.
I intend to set up two applications, one that represents our demo instance and another that is production. I was going to set these up in two different Environments for sanity’s sake. Simple enough.
But I also want to capture the logs for both of them in the same ELK Stack… initially I thought that I could set up a third environment for logging and push all the data from demo and production into that Elasticsearch DB, but it appears that the Log Drain tool works only within an environment. Does that mean I have to have 2 ELK Stacks, one within the demo Environment and the other within the prod Environment.
Is there a way to achieve what I want here?