# Graylog shows only logs till 3 Hours ago

**URL:** https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353
**Category:** Graylog Central (peer support)
**Created:** [May 25, 2018, 3:00pm UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353 "2018-05-25T15:00:04Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![minosjan](https://avatars.discourse-cdn.com/v4/letter/m/71c47a/32.png) [@minosjan](https://community.graylog.org/u/minosjan)
#### Post date: [May 25, 2018, 3:00pm UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/1 "2018-05-25T15:00:04Z")

</div>

Hello,  
I have the strange issue on our Graylog. It shows only the messages till 3 hours ago, no newer. But, new messages are added successfully to log.  
I check indices and deflector and it appearing well; rebuilding indices did not solve the problem. I check time synchronization and found it well too, Graylog box synced via NTP with our DCs.  
What may be the cause?  
BR, Anton Minosjan

---

<div class="post-metadata">

### Author: ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [May 25, 2018, 3:10pm UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/2 "2018-05-25T15:10:13Z")

</div>

Check the logs of your Graylog and Elasticsearch nodes.  
➡ [http://docs.graylog.org/en/2.4/pages/configuration/file\_location.html](http://docs.graylog.org/en/2.4/pages/configuration/file_location.html)

---

<div class="post-metadata">

### Author: ![minosjan](https://avatars.discourse-cdn.com/v4/letter/m/71c47a/32.png) [@minosjan](https://community.graylog.org/u/minosjan)
#### Post date: [May 25, 2018, 4:26pm UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/3 "2018-05-25T16:26:31Z")

</div>

Hi, I check logs for Graylog and Elasticsearch and find more in it.  
Is it possible to upload it here (packed if need)?  
BR, Anton

---

<div class="post-metadata">

### Author: ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [May 25, 2018, 6:32pm UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/4 "2018-05-25T18:32:45Z")

</div>

> [@minosjan](#):
>
> Is it possible to upload it here (packed if need)?

You can upload the logs to a pastebin service such as [https://0bin.net/](https://0bin.net/) or [https://gist.github.com/](https://gist.github.com/) and post the link here.

---

<div class="post-metadata">

### Author: ![minosjan](https://avatars.discourse-cdn.com/v4/letter/m/71c47a/32.png) [@minosjan](https://community.graylog.org/u/minosjan)
#### Post date: [May 26, 2018, 6:20am UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/5 "2018-05-26T06:20:46Z")

</div>

Hello,  
uploaded to Github,  
server.log from Graylog and rtm-graylog-1466756804.log from Elasticsearch.

> <https://gist.github.com/minosjan/9df6c65f2925143f5388b8a505161823>

  
Problem started 24.05.2018

---

<div class="post-metadata">

### Author: ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [May 26, 2018, 9:47am UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/6 "2018-05-26T09:47:09Z")

</div>

1. You’re using a pretty old version of Graylog (2.0.3) and should upgrade to the latest stable version of Graylog.
2. Your MongoDB database is regularly not reachable.
3. Your Elasticsearch cluster seems to be too slow to cope with the throughput of messages at some times, leading to a 100% filled message journal.

---

<div class="post-metadata">

### Author: ![minosjan](https://avatars.discourse-cdn.com/v4/letter/m/71c47a/32.png) [@minosjan](https://community.graylog.org/u/minosjan)
#### Post date: [May 28, 2018, 8:52am UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/7 "2018-05-28T08:52:00Z")

</div>

Hello,  
I extend journal size, maximum keeped logs, rebuild indexes and after ~3 hours it became working.  
Thank you for support, closing question.  
BR, Anton

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)
#### Post date: [June 11, 2018, 8:52am UTC](https://community.graylog.org/t/graylog-shows-only-logs-till-3-hours-ago/5353/8 "2018-06-11T08:52:01Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
