Hello,
Im really new to graylog and very flashed of the good functionality.
Unfortunately I have the same issues regularly. We are collecting logs 200messages/s
Here are the specs: 3 nodes, every has 4 CPUs and 16 GiB RAM.
Diskspace is nearly empty.
It is no option for us to loose the messages. How can I prevent this from happening? And how can I tell graylog, to start processing the disk journal?
kind regards,
Philipp
Hej Philipp,
please do not highjack older topics - if you have only messages in your Journal you might have some issues with your elasticsearch.
The message rate you mention shouldn’t create any issues here.
Without knowing anything about your Infrastructure, (Graylog servers, Elasticsearch servers giving any suggestions is like a 
Jan
ps: I have split your post from the past thread as we do not like high-jacking threads here.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
