# Graylog blocked **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [November 10, 2020, 8:17am UTC](https://community.graylog.org/t/graylog-blocked/17795 "2020-11-10T08:17:45Z")\ **Posts on this page:** 11\ **Page:** 2
**Author:** ![ttsandrew](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@ttsandrew](https://community.graylog.org/u/ttsandrew)\ **Post date:** [November 18, 2020, 7:01pm UTC](https://community.graylog.org/t/graylog-blocked/17795/21 "2020-11-18T19:01:51Z")
Please review this for more information on heap sizes. > **[Java Heap sizes in Graylog and ElasticSearch | Graylog](https://www.graylog.org/videos/java-heap)** We have configured elasticsearch to use 50% of ram, graylog-server to use 33%, and left the remaining roughly 17% available for the operating system/other services. So far that configuration has been ok for us. ---
**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\ **Post date:** [November 18, 2020, 7:04pm UTC](https://community.graylog.org/t/graylog-blocked/17795/22 "2020-11-18T19:04:32Z")
the content of /etc/elasticsearch/jvm.options ![java heap](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/0/0ae6b1327c68399d3b60b41bb2c51277b784d018.png) ![java heap 1](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/2/252a427afed0b4b2d7510a31c63f8a10a2bed47c.png) ![java heap2](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/3/30d8a4fa6a1a450130c8ef03131fd3a1c451ef3e.png) ---
**Author:** ![ttsandrew](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@ttsandrew](https://community.graylog.org/u/ttsandrew)\ **Post date:** [November 18, 2020, 7:08pm UTC](https://community.graylog.org/t/graylog-blocked/17795/23 "2020-11-18T19:08:25Z")
So your elasticsearch heap size is too small most likely. If the system has 12 GB RAM available I would set -Xms6g and -Xmx6g. If it’s 16 GB, I would do -Xms8g and -Xmx8g. Once you make the change, restart the elasticsearch service. It would be nice to confirm this is the issue by reviewing the elasticsearch service log for symptoms of memory exhaustion. ---
**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\ **Post date:** [November 18, 2020, 7:16pm UTC](https://community.graylog.org/t/graylog-blocked/17795/24 "2020-11-18T19:16:22Z")
thank you very much for your support and your information, it’s very kind of you, so i have to change the value , what exactly is the value I need to change ?? ---
**Author:** ![ttsandrew](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@ttsandrew](https://community.graylog.org/u/ttsandrew)\ **Post date:** [November 18, 2020, 7:21pm UTC](https://community.graylog.org/t/graylog-blocked/17795/25 "2020-11-18T19:21:46Z")
You’re welcome of course. Change -Xms1g to -Xms6g or -Xms8g. Change -Xmx1g to -Xmx6g or -Xmx8g. Then restart the elasticsearch service: ``` systemctl daemon-reload systemctl restart elasticsearch ``` Review the document I linked above for more information on jvm heap sizes. My recommended configuration is not necessarily optimal for your needs, and this isn’t necessarily the solution. ---
**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\ **Post date:** [November 18, 2020, 7:34pm UTC](https://community.graylog.org/t/graylog-blocked/17795/26 "2020-11-18T19:34:53Z")
done , I changne 2 value of -Xms1g to -Xms6g and the -Xms1g to -Xms6g 🙂 now it is it seems OK but In search , when I look for "the last 5 or 15 minutes, no logs appear but appear only for the 30 minutes or last hour or more ---
**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\ **Post date:** [November 18, 2020, 7:40pm UTC](https://community.graylog.org/t/graylog-blocked/17795/27 "2020-11-18T19:40:50Z")
Now , it works @cawfehman Now it is good Thanks a lot ---
**Author:** ![ttsandrew](https://avatars.discourse-cdn.com/v4/letter/t/97f17d/32.png) [@ttsandrew](https://community.graylog.org/u/ttsandrew)\ **Post date:** [November 18, 2020, 8:21pm UTC](https://community.graylog.org/t/graylog-blocked/17795/28 "2020-11-18T20:21:54Z")
@Labidi, can you please clarify what you changed? You repeated that you changes -Xms1g. Did you also change -Xm **x** 1g? ---
**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\ **Post date:** [November 18, 2020, 8:52pm UTC](https://community.graylog.org/t/graylog-blocked/17795/29 "2020-11-18T20:52:34Z")
![Xms](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/4fe145c928fae7fb9e737e1436058f47b5e622fb.png) ---
**Author:** ![cawfehman](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cawfehman/32/4132_2.png) [@cawfehman](https://community.graylog.org/u/cawfehman)\ **Post date:** [November 18, 2020, 9:43pm UTC](https://community.graylog.org/t/graylog-blocked/17795/30 "2020-11-18T21:43:41Z")
It’s catching up… give it some time… you can see the oldest message in the journal. Hopefully that fixes your issue moving forward. Good luck ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [December 2, 2020, 9:43pm UTC](https://community.graylog.org/t/graylog-blocked/17795/31 "2020-12-02T21:43:43Z")
Closed on December 2, 2020, 9:43pm UTC This topic was automatically closed 14 days after the last reply. New replies are no longer allowed. [Previous page](https://community.graylog.org/t/graylog-blocked/17795.md?page=1)