Hi everyone,
I want apply CrowdSec for my ECS Cluster which have many services. Every service will push Nginx logs to CloudWatch and CrowdSec pull logs from it. So when a service handle large traffic, there are many logs that Crowdsec received. I want to ask how I can scale my CrowdSec cluster and distribute logs into them. This is my architecture:
Hi @vanluke,
Sorry for the delay. You can do it only with one agent if you want. You need to fine-tune the agent configuration + add more resources to the machine where the agent is located.
You can define multiple cloudwatch datasources in one agent with regex in stream names.
If you want absolutely to have multiple agents, we need to know in which service you will deploy the agents.