Dashboard widgets show only part of results sometimes

Graylog Central (peer support)
1

hi,

is there somewhere a timeout value that needs to be set?

Background of my question:

I have made a couple of dashboards, where the largest queries may query over 100 million messages. Sometimes some of the results returned are missing; this can be seen for example in a case when there are some spikes in the message volume during some minutes, and sometimes the spikes are missing, then at some refresh, the spikes come visible in the graph.

2

I tried setting

elasticsearch_request_timeout = 5m

and restarted the graylog nodes. But it seems the problem persists - the dashboard widgets all return results in less than a minute, but sometimes some results are missing.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.