Hello. Graylog 6.1 with datanode in docker-compose. Get an error entity content is too long [119983305] for the configured buffer limit [104857600].
I tried ./datanode.conf:/etc/graylog/datanode/datanode.conf
opensearch.http.max_content_length: 200mb
i tried env variables in different variations: GRAYLOG_DATANODE_HTTP__MAX_CONTENT_LENGTH: “200mb” GRAYLOG_DATANODE_OPENSEARCH_HTTP__MAX_CONTENT_LENGTH: “200mb”
and no result. tell me please, how to increase opensearch parameter?
Hi @OrNix ,
You’ll have to configure this property by using configuration overrides: Data Node Configuration Overrides
@Tdvorak, thanks for your reply. I tried this way, as you told, but no result.
I think because in Override Configuration Allowlist there are only 5 parameters, and http.* are missing.
| cluster.routing.allocation.disk.watermark.* |
| cluster.routing.allocation.awareness.* |
| node.attr.zone |
| plugins.security.ssl.transport.enforce_hostname_verification |
| index.codec |
The allowlist there is only to avoid displaying warnings for these selected properties. But every configured will be provided to the opensearch. So it should also work for your `http.max_content_length=200mb`.
If you configure it there, link the overrides file in datanode.conf and restart your datanode, you should see a warning in the datanode log, mentioning your override. It’s a confirmation that you have done everything correctly.
Ah, you are on 6.1, but this feature has been introduced only in 6.2. If you can, upgrade your graylog server and datanodes to 6.2 or even better, to 6.3.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
