Early this morning the messages stopped processing.
I have deleted all of the indexes (except the active one).
I have plenty of disk space now.
I ran the graylog-ctl stop - reboot box,
I see messages coming in but not out.
I am using version Graylog 2.2.3+7adc951 (latest) -
Any suggestion on what to check?
jochen
(Jochen)
July 18, 2017, 2:05pm
2
You might have to delete the Graylog message journal because it might have been corrupted.
http://docs.graylog.org/en/2.2/pages/configuration/file_location.html#omnibus-package
So do I just need to shutdown graylog - then delete the journal file - will it get recreated automatically on start?
derPhlipsi
(Philipp Ruland)
July 18, 2017, 2:56pm
4
Yes it will, as long as the file doesn’t exist and Graylog has write permissions on the folder.
Greetings, Phil
I see a journal directory in /var/opt/graylog/data is that what I am looking for?
It is a directory - that has a file named
graylog-2-committed-read-offset
messagejournal-0 (directory)
recovery-point-offset-checkpoint
In the messagejounral-0 directory there are .index and .log files
Which ones should I delete ?
jochen
(Jochen)
July 18, 2017, 3:24pm
7
All of them (while Graylog is stopped).
I apologize for not being clear.
So I need to delete the
graylog-2-commited-read-offset file
messsagejournal-0 directory and all files in that directory
and recovery-point-offset-checkpoint file?
derPhlipsi
(Philipp Ruland)
July 18, 2017, 3:29pm
9
Delete the complete journal folder
1 Like
Thank you.
That resolved that issue
I am back to processing message now!
1 Like
system
(system)
Closed
August 1, 2017, 3:58pm
11
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.