after the weekend I got two error Messages from Graylog, which are:
- Uncommited messages deleted from journal
- Journal utilization is too high
I researched and found out that you should extend the journal size.
I did set the journal size to 4GB now. My question is if this is most likely the solution for both error messages?
The message_journal_max_age is commented with “#” so I guess Graylog takes the default vaule which is 12 hours should I increase that too? If so to what value?
EDIT: Just realized that Journal Utilization keeps growing,100K unprocessed messages so far. When I check the Search I don’t get new messages the total messages received Number stays the same.
2 CPU Cores
(I could increse the virtual Hardware settings if needed)
Just want to make sure Graylog runs in future without issues like that.
Thanks in advance.