Hi our Server log limit has reached 5 GB limit ,
I want to identify which device is sending max logs ?
OS Centos 7, DB mongo
Hi there and welcome to the Graylog Community.
For folks to better help you, can you try adding a bit more to your question? I’ll refer you to How to Post a Question in the Community that Gets Responses, which outlines the things that are generally needed when asking a question in the forum that will get you a quick answer.
With that said, have you tried looking at the built-in sources dashboard to see if that surfaced any useful information?
1 Like
Welcome to the community, @sushant.diwakar . To increase your chances of a response, I’ve moved your post to “Daily Challenges.” As a tip, the more information you can provide in your post, the more likely you’ll get a response. Please be sure to include as much detail about your issue as you can.
Welcome. I’m glad you’re here!
Yes correct I am looking for sources which are sending high amount of logs to Server.
Graylog Sever version is 4.1
Check this video, it’s probably what you are looking for:
https://graylog.zammad.com/help/en-us/20-videos/76-monitoring-message-sizes-by-stream-and-by-source
There is special field gl2_accounted_message_size from graylog 3.2 you can use to aggregate message size.
https://docs.graylog.org/en/4.1/pages/upgrade/graylog-3.2.html?#accounted-message-size-field
https://docs.graylog.org/en/4.1/pages/changelog.html?highlight=gl2_accounted_message_size#graylog-3-2-0
2 Likes
Many thanks. I got what I wanted.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.