Graylog not receiving messages, unprocessed messages

Graylog Central (peer support)
2

The way you are describing it it sounds like Elasticsearch (backend DB for Graylog) is having an issue. Either it is not running or you have filled up the storage and it had to stop.

I don’t know what system you have so I have to guess at commands… if it is Ubuntu then you might do the following to check if elasticsearch is running:

$ systemctl status elasticsearch

if running you would get this in return:

● elasticsearch.service - Elasticsearch
     Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
     Active: active (running) since Mon 2022-05-23 06:52:09 EDT; 1 weeks 3 days ago
       Docs: https://www.elastic.co
   Main PID: 713 (java)
      Tasks: 163 (limit: 10287)
     Memory: 7.4G
     CGroup: /system.slice/elasticsearch.service
             ├─ 713 /usr/lib/jvm/java-8-openjdk-amd64//bin/java -Xshare:auto -Des.networkaddress.cache.ttl=60 -Des.networkaddress.c>
             └─1085 /usr/share/elasticsearch/modules/x-pack-ml/platform/linux-x86_64/bin/controller

you could check for disk space with df -h

Here is a page with a bunch of diagnostic commands plus how to give good information when asking a question:

1 Like