Graylog Version 2.2.1
Where exactly should we specify this attribute (20% seems to be the consensus).
My ES cluster gave up this morning, after a month of operation;
[WARN ][indices.breaker.fielddata] [fielddata] New used memory 20949355340 [19.5gb] for data of [message] would be larger than configured breaker: 19903571558 [18.5gb], breaking
I’ve specified it in elasticsearch.yml, which didn’t seem to work. I’ve now specified it in graylog’s server.conf < is that correct?
Is there anything in _nodes/stats that will tell me if I’ve set it correctly?