Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!
1. Describe your incident:
Cannot see any log (or message), not even can execute a simple query when I pinned down to the Search option. A message appears saying , first “loading”, and, after a while, “this is taking a bit longer, please hold on”…I am truly desperate. Have migrated from Graylog 4.0 to 6.1.1 and everything seems to be fine in terms of configuration (hint: I am running Server and Datanode plus Opensearch 2.15 in the same Red Hat LInux 8.4 machine". See below
2. Describe your environment:
- OS Information:
Red Hat Linux 8.4; RAM= 16GB, Disk Size= 1TB - Package Version:
Graylog 6.1.1
Opensearch 2.15
MongoDB 7.0
filebeat 7.x
- Service logs, configurations, and environment variables:
the usual ones, can share by email if needed. All tested ok, at least in paper, by running sudo systemctl status . Everything under /etc/graylog (then we do have directories for server, datanode, and sidecar). /etc/filebeat , /etc/auditbeat , opensearch within the usual directory. We do have https enabled (working well) with up to date and valid certificates.
3. What steps have you already taken to try and solve the problem?
Reducing indexes size, reducing shards, erasing logs (there are there, I can export to .csv , so, somewhere I am collecting tons of data, just 1.5GB in four days). Turning down sidecars , filebeats…I am only installed this to monitor two other servers (yes, with sidecars and beats), one with Gitlab and the other one hosting SonarQube. Very very simple environment.
4. How can the community help?
Helping me to refine the conf or giving advice on what to do to seeing the logs and perform searches (again, there are there, can download to .csv)
Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]