Graylog high journal utilization is too high

Yes, we did had that to, and created a template so the new indices keep the correct refresh interval.
We did that with cerebro and was not that difficult to do.

Template should be this:

{
"order": 0,
"index_patterns": [
"graylog_*"
],
"settings": {
"index": {
"refresh_interval": "30s"
}
},
"mappings": {},
"aliases": {}
}

SC6

Nice, I knew I was missing something. Thx @Arie

1 Like

What command are you referring to?

Could you explain, not sure what your referring to by “memory value highlighted”

I’m going to take a guess, have you tried running this command with the “l” (that’s a lower case L) flag.

systemctl status elasticsearch -l

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.