Graylog Output issue to Elasticsearch

[tmacgbay]

Perhaps related to this post where it was a GROK issue? the post at the end shows the beginnings of how it was tracked down…

Graylog nodes stop outputting/fill up buffers

Colleague of mine has subscribed to the Graylog newsletter. These newsletter have a little “Did you know” section at the bottom for technical tips. This months last tip was this: And here’s where the ‘Get process-buffer dump’ feature lets you know which message is sending your processing into an endless loop. [newsletter_april_2020_process_buffer] I’m not saying that I’m upset, but it does feel little bit like the person who writes these, also lurks in this forum and wanted to throw some …