# Journal Contains Unprocessed Messages

**URL:** <https://community.graylog.org/t/journal-contains-unprocessed-messages/1722>\
**Category:** Graylog Central (peer support)\
**Created:** [July 13, 2017, 9:00am UTC](https://community.graylog.org/t/journal-contains-unprocessed-messages/1722 "2017-07-13T09:00:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![GTownson](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gtownson/32/793_2.png) [@GTownson](https://community.graylog.org/u/GTownson)\
**Post date:** [July 13, 2017, 9:00am UTC](https://community.graylog.org/t/journal-contains-unprocessed-messages/1722/1 "2017-07-13T09:00:47Z")

</div>

My instance of Graylog (2.3) isn’t processing messages. This issue has come out of no where, we haven’t changed any config etc. so i’m unsure as to why this issue has arisen.

I have tried restarting: Graylog, Elasticsearch and Mongodb.

I have also deleted the message journal and then restarted everything.

I have checked the logs and there isn’t anything in there at all.

I used netstat to ensure that ES was working and check the GL config to ensure that it was pointed in the right direction of ES.

Not really sure what I can do now, any ideas?

G

---

<div class="post-metadata">

**Author:** ![GTownson](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gtownson/32/793_2.png) [@GTownson](https://community.graylog.org/u/GTownson)\
**Post date:** [July 14, 2017, 9:23am UTC](https://community.graylog.org/t/journal-contains-unprocessed-messages/1722/2 "2017-07-14T09:23:37Z")

</div>

The issue seems to have resolved itself.

This seems completely unrelated but I deleted the server.log file and the created a new (empty) one, then restarted Graylog twice and messages are now being processed.

G

---

<div class="post-metadata">

**Author:** ![Mantil](https://avatars.discourse-cdn.com/v4/letter/m/ecd19e/32.png) [@Mantil](https://community.graylog.org/u/Mantil)\
**Post date:** [July 26, 2017, 7:47pm UTC](https://community.graylog.org/t/journal-contains-unprocessed-messages/1722/3 "2017-07-26T19:47:41Z")

</div>

I found this by accident also. Purging the log file and it worked fine after. Seemed kinda random but has been working for me.

---

<div class="post-metadata">

**Author:** ![sdmonster](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/sdmonster/32/1037_2.png) [@sdmonster](https://community.graylog.org/u/sdmonster)\
**Post date:** [August 2, 2017, 7:42pm UTC](https://community.graylog.org/t/journal-contains-unprocessed-messages/1722/4 "2017-08-02T19:42:22Z")

</div>

This worked for me as well. Had 600k messages in journal on master node only.  
(I have 3 graylog nodes in a cluster behind haproxy the other 2 nodes had 10-40 messages in the journal.)  
Stopped graylog, renamed /var/log/graylog-server/server.log and created a new empty file.  
Started graylog.

Journal on start showed 300k messages which decreased to 30 messages in about 10 minutes and stayed there.  
So this definitely fixes the issue but, I don’t understand why…

---

<div class="post-metadata">

**Author:** ![GTownson](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gtownson/32/793_2.png) [@GTownson](https://community.graylog.org/u/GTownson)\
**Post date:** [August 9, 2017, 12:50pm UTC](https://community.graylog.org/t/journal-contains-unprocessed-messages/1722/5 "2017-08-09T12:50:55Z")

</div>

I have found deleting the journal seems to fix this issue the majority of the time, the below Graylog forum post goes into the specifics of this.

[https://community.graylog.org/t/after-disk-space-issue-no-out-messages-help/1766/6](https://community.graylog.org/t/after-disk-space-issue-no-out-messages-help/1766/6)

Regards,

G

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [August 23, 2017, 12:51pm UTC](https://community.graylog.org/t/journal-contains-unprocessed-messages/1722/6 "2017-08-23T12:51:03Z")

</div>

Closed on August 23, 2017, 12:51pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
