Error : While retrieving data for this widget

Daer all,

We have the issue “While retrieving data for this widget, the following error (s) occurred:” After we click to “Dashboard” tab and “Input” tab.

Can we will any process on graylog server ? With the Least impact

We not sure that Related to OVA file ? (Current, We using OVA file on production)

and We SSH to graylog server, We found “failed” status of elasticsearch after We ran systemctl status elasticsearch.service command. and Can we fixed the issue ?

Anyway if you need more information from us, please kindly let us know.

Thank you for your kind support.

@Tanawat
Hello,
Judging from the picture, looks like you need more memory.
Or
You over committed memory.

How much total memory do you have for Graylog?
What does this files look like?

/etc/elasticsearch/jvm.options
/var/log/elasticsearch/hs_err_pid495.log
/etc/default/graylog-server
1 Like

Dear @gsmith,

Thank yu for your reply. For graylog server we provide 2CPUs / 2GB Memory / 22GB Storage (Default OVA file) and We ran command. details as below

Can we fixed the issue ? With the Least impact

We would like to know for 22GB Sorage that can keep log file or not and how long can keep the ?

Anyway if you need more information from us, please kindly let us know.
Thank you for your kind support.

@Tanawat
Hello,

With 2CPUs / 2GB Memory / 22GB Storage is good for testing out graylog but if you put any type of load on it you may need to increase you RAM, Storage and CPU. This is all depending on how many logs you are receieving and for how long you want to retain them. You may have to adjust your resources as needed.

If this is a virtual machine (VM) I would suggest you increase your memory to 4 GB. That would be your “Least impact”.

This depends on what kind of logs your ingesting, how long you want to retain logs.

To find out more have a look at these links below, they might give you a better idea on how to setup Graylog for your environment.

https://www.graylog.org/graylog-enterprise-edition#:~:text=System%20Requirements&text=4%20CPU%20Cores,IOPS%20for%20Elasticsearch%20Log%20Storage

https://docs.graylog.org/en/4.0/pages/installation/virtual_machine_appliances.html#virtual-machine-appliances

https://docs.graylog.org/en/4.0/pages/getting_started/planning.html#retention

Hope that helps.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.