Graylog Sever 6.1 version - Suddenly Unavailable

Graylog Central (peer support)
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
graylog server suddenly unavailable occasionally

2. Describe your environment:

  • OS Information: CentOS Stream

  • Package Version: 9

  • Service logs, configurations, and environment variables:
    check logs from server, datanode and messages and has 8 cpu, 20gb ram, 250gb hard disk via virtual machine.

3. What steps have you already taken to try and solve the problem?
check the logs it seems nothing has error while on unavailable state tried to modify config of server nothing still encountered unavailable.

4. How can the community help?
Please help to figure out, I suspected that the memory capacity is involve on this since it raised quickly to maximum range which is 20gb how can I fix it It has only single node.

Kindly see attached photo.

Your response is appriciated.
Thank you and regards,

image
image433×153 9.11 KB

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

Hello @wil,

Can I ask what HEAP you have assigned to both Graylog and Data Node/Opensearch? As you have 20GB and both Graylog and OS exist of the same node I would recommend assigning 2GB to Graylog and 8Gb to Opensearch.

3

Hi @Wine_Merchant,

I did not modify any value on heap_sizes for graylog and datanode/opensearch its only a default to 1G.

As you suggest, Is this the correct path file where am I do an assignment for 2GB to Graylog [etc/sysconfig/graylog-server] and 8Gb to Datanode/Opensearch [etc/graylog/datanode/jvm.options] ?

Please see the attached file.

image
image1399×360 55.3 KB

4

For Graylog that is the correct path at which to set heap, alter both Xms and Xmx to 2GB. For the Data Node you should set the opensearch_heap option within the datanode.conf under /etc/graylog/datanode to 8GB.

This would leave 10GB RAM for all other operations on your host.

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.