# Journal Filling but Graylog not Processing **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [June 26, 2020, 10:15am UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090 "2020-06-26T10:15:19Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![nick](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nick](https://community.graylog.org/u/nick)\ **Post date:** [June 26, 2020, 10:15am UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/1 "2020-06-26T10:15:20Z")
I had a storage issue on my virtual host where the host itself ran out of disk space. After clearing the issues up and reclaiming the storage I rebooted both the Graylog Node and the Elasticsearch node (separate VMs). Now in GL the journal has 1.4million messages queued and GL isn’t processing them. I assume the journal became corrupted (though I can’t see anything in the logs). Looking through the forum at similar issues is the only solution to delete the journal directory on the GL server and therefore lose all the journaled messages? ---
**Author:** ![makarands](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@makarands](https://community.graylog.org/u/makarands)\ **Post date:** [June 26, 2020, 12:20pm UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/2 "2020-06-26T12:20:47Z")
@nick You can take the backup of journal directory other location and then delete the journal directory (default location: /var/lib/graylog-server/journal) on the Graylog server. After deleting you need to restart your Graylog server service to rotate the logs. Hope this information helps you 🙂 ---
**Author:** ![nick](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nick](https://community.graylog.org/u/nick)\ **Post date:** [June 26, 2020, 2:06pm UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/3 "2020-06-26T14:06:52Z")
Sorry, what do I do with the backup of the journal directory? Do I backup the Journal directory, restart the service and then restore the backup? Or do I then need to restart the service again after the restore? ---
**Author:** ![makarands](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@makarands](https://community.graylog.org/u/makarands)\ **Post date:** [June 26, 2020, 2:30pm UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/4 "2020-06-26T14:30:15Z")
> [@nick](#): > > what do I do with the backup of the journal directory? @nick You don’t need to do anything with the journal directory backup. Its just precautionary steps I told you to do. After deleting the journal directory you should restart Graylog server service and check if it started processing or not. ---
**Author:** ![nick](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nick](https://community.graylog.org/u/nick)\ **Post date:** [June 26, 2020, 2:32pm UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/5 "2020-06-26T14:32:46Z")
Yes, all is working again - how do I now import the logs from the backup of the journal I took? I don’t want to lose 1.6 million logs from the last 24 hours ---
**Author:** ![nick](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nick](https://community.graylog.org/u/nick)\ **Post date:** [June 29, 2020, 10:04am UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/6 "2020-06-29T10:04:02Z")
Is there anything I can do here or if you have a corrupted Journal you’ve lost the logs within that time? Seems odd that Graylog keeps adding to the Journal if its corrupted rather than stopping the ingest. ---
**Author:** ![makarands](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@makarands](https://community.graylog.org/u/makarands)\ **Post date:** [June 30, 2020, 10:37am UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/7 "2020-06-30T10:37:07Z")
@nick Glad to know that your issue is resolved. Your journal is important until its went into Elasticsearch. Some messages were deleted from the Graylog journal before they could be written to Elasticsearch. Please verify that your Elasticsearch cluster is healthy and fast enough. ---
**Author:** ![nick](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nick](https://community.graylog.org/u/nick)\ **Post date:** [June 30, 2020, 10:55am UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/8 "2020-06-30T10:55:42Z")
Hi, sorry but that doesn’t make any sense? I know why the journal was filling, I’m not concerned about that. Can I somehow take the Journal files I have backed up and import the logs they contain into Graylog or are these logs now lost? ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [July 14, 2020, 11:00am UTC](https://community.graylog.org/t/journal-filling-but-graylog-not-processing/16090/9 "2020-07-14T11:00:18Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.