Journal utilization

I have graylog 4.2 on ubuntu 20.
How to increase Journal utilization. i have an error
Journal utilization is too high and may go over the limit soon. Please verify that your Elasticsearch cluster is healthy and fast enough. You may also want to review your Graylog journal settings and set a higher limit.

Hello @Sharzad

The Journal size is what you referring to, this locate on your Graylog configuration file in this section.


Hope that helps

do you mean message_journal_max_size? it’s comment it out, and is 50gb.
What is a rule? how big it can be?

Default is 5 GB, possible size is dependent of the disk volume it is on.

Is utilization on your buggers in System > Nodes > Detail okay?

you should also consider looking into what is causing your journal to fill up. Are you ingesting too much? Are you not processing it efficiently? Are there ES issues?

If it happens once in a while, it’s probably not a big deal… a consistently full or consistently partially full journal can have a detrimental impact on your environment.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.