Lets assume that Graylog process messages from RabbitMQ queue. What happens if Elasticsearch become unavaliable? AFAK Graylog jurnal will be filled, and than when there is no more space, next messages will be lost.
My goal here is to not loose a single message, it does not matter what happens. I would like for example block RabbitMQ message queue if elasticsearch gets disconected or unresponsive (for example read only indexes).
- Can i configure Graylog to block inputs if jurnal if full?
- Any other ideas to solve “loosing logs” problem?