hi, the situation is like this:
OS Information:
centos7.6 + graylog 4.0
Package Version:
graylog 4.0
graylog configurations:
3. What steps have you already taken to try and solve the problem?
I increase the output batch size and outputbuffer processors but it does not work.
4. How can the community help?
Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]
Hey @loveyang2012
Check your Elasticsearch status , ensure it running correct.
curl -XGET http://localhost:9200/_cluster/health?pretty
Your process_buffers & output_buffers should match the amount of CPU cores you have on that node, if not you may want to either lower them or add more resource to that node. with that many logs in the journal it might be a while, all depends of what resource you have commited to this node. I would also check the log file on both Graylog and elasticsearch. If you have bad extractors and/or pipelines this could also be part of the issue.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
