I am using two grok patterns in my system, both the patters works fine and retrive the data, these are pretty big grok patters, the problem starts after few minute, Graylog unable to process any incoming messages and seeing below message in nodes
The journal contains 74,715 unprocessed messages in 3 segments. 0 messages appended, 0 messages read in the last second.
Similar issue discussed earlier at https://github.com/Graylog2/graylog2-server/issues/1699, but resolution,
This issue resolved, after removing Grok and restart
No error in Graylog logs
Graylog version 2.2.1
How to debug this issue, or improve the performance with the Grok