{"action":"created","issue":{"url":"https://api.github.com/repos/aol/moloch/issues/459","repository_url":"https://api.github.com/repos/aol/moloch","labels_url":"https://api.github.com/repos/aol/moloch/issues/459/labels{/name}","comments_url":"https://api.github.com/repos/aol/moloch/issues/459/comments","events_url":"https://api.github.com/repos/aol/moloch/issues/459/events","html_url":"https://github.com/aol/moloch/issues/459","id":147224585,"number":459,"title":"MultiViewer with Several captures per machine","user":{"login":"yogch","id":13855845,"avatar_url":"https://avatars.githubusercontent.com/u/13855845?v=3","gravatar_id":"","url":"https://api.github.com/users/yogch","html_url":"https://github.com/yogch","followers_url":"https://api.github.com/users/yogch/followers","following_url":"https://api.github.com/users/yogch/following{/other_user}","gists_url":"https://api.github.com/users/yogch/gists{/gist_id}","starred_url":"https://api.github.com/users/yogch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yogch/subscriptions","organizations_url":"https://api.github.com/users/yogch/orgs","repos_url":"https://api.github.com/users/yogch/repos","events_url":"https://api.github.com/users/yogch/events{/privacy}","received_events_url":"https://api.github.com/users/yogch/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-04-10T13:23:44Z","updated_at":"2016-04-10T13:48:28Z","closed_at":null,"body":"<!--\r\nFor support questions the IRC channel \"#moloch-fpc\" on freenode or \r\nthe google group https://groups.google.com/forum/#!forum/moloch-fpc may be faster/easier.\r\n-->\r\n\r\n<!-- For bugs or support questions please provide -->\r\n**Elasticsearch version**: 1.5.2\r\n\r\n**Moloch version**: 0.11.5\r\n\r\n**OS name and version**: Ubuntu 14.04\r\n\r\n**Provide logs, stack traces and steps to reproduce**:\r\n\r\n<!-- For feature requests, please remove the above bug report block and describe the feature -->\r\n\r\nWhat happens when there're couple of machines, and on each machine there are couple of captures?\r\nI want to see everything with MultiViewer.\r\n\r\nLet's say I have 2 machines. On each machine 2 nodes:\r\nmachine 1: node1, node2\r\nmachine 2: node3, node4\r\n\r\nFrom another machine, I want to expand the session detail of a session from node1 (call sessionDetail) and download PCAP.\r\nThe problem is, MultiViewer will try to connect to `node1`... instead of the IP of machine1.\r\n\r\nThanks\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/aol/moloch/issues/comments/207988054","html_url":"https://github.com/aol/moloch/issues/459#issuecomment-207988054","issue_url":"https://api.github.com/repos/aol/moloch/issues/459","id":207988054,"user":{"login":"awick","id":427321,"avatar_url":"https://avatars.githubusercontent.com/u/427321?v=3","gravatar_id":"","url":"https://api.github.com/users/awick","html_url":"https://github.com/awick","followers_url":"https://api.github.com/users/awick/followers","following_url":"https://api.github.com/users/awick/following{/other_user}","gists_url":"https://api.github.com/users/awick/gists{/gist_id}","starred_url":"https://api.github.com/users/awick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/awick/subscriptions","organizations_url":"https://api.github.com/users/awick/orgs","repos_url":"https://api.github.com/users/awick/repos","events_url":"https://api.github.com/users/awick/events{/privacy}","received_events_url":"https://api.github.com/users/awick/received_events","type":"User","site_admin":false},"created_at":"2016-04-10T13:48:28Z","updated_at":"2016-04-10T13:48:28Z","body":"https://github.com/aol/moloch/wiki/Architecture might help\r\n\r\nYou only need multies if you are running multiple moloch clusters, if you are only running 1 moloch clusters you do not need it.  A moloch cluster is defined by a separate ES cluster or the same ES cluster and different prefixes.\r\n\r\nAssuming you are running 1 moloch cluster, just run multiple capture nodes per machine and 1 viewer per machine.\r\n\r\nIf you are really running mutliple moloch clusters and they are on the same machine, then you will need to set viewPort everywhere.\r\n\r\n"}}