# Memory consumption above configuration limit

**URL:** <https://community.graylog.org/t/memory-consumption-above-configuration-limit/36417>\
**Category:** Graylog Central (peer support)\
**Tags:** data-node\
**Created:** [October 6, 2025, 11:59am UTC](https://community.graylog.org/t/memory-consumption-above-configuration-limit/36417 "2025-10-06T11:59:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ajd](https://avatars.discourse-cdn.com/v4/letter/a/a9adbd/32.png) [@ajd](https://community.graylog.org/u/ajd)\
**Post date:** [October 6, 2025, 11:59am UTC](https://community.graylog.org/t/memory-consumption-above-configuration-limit/36417/1 "2025-10-06T11:59:50Z")

</div>

Hello

**1. Describe your incident:**

My machine is going out of memory after a few hours, graylog-datanode service is consuming more than the max memory assigned in configuration

**2. Describe your environment:**

- OS Information: Redhat 9.6 , VM 20vcpu , 128Go RAM

- Package Version: Graylog 6.3.3

- Service logs, configurations, and environment variables:

- around 400G logs per day

/etc/graylog/datanode/datanode.conf

node\_id\_file = /etc/graylog/datanode/node-id  
config\_location = /etc/graylog/datanode  
mongodb\_uri = mongodb://localhost/graylog  
bind\_address = 0.0.0.0  
opensearch\_location = /usr/share/graylog-datanode/dist  
opensearch\_config\_location = /var/lib/graylog-datanode/opensearch/config  
opensearch\_data\_location = /logdata/opensearch/data  
opensearch\_logs\_location = /data/log/graylog-datanode/opensearch  
opensearch\_heap = 62g

/etc/graylog/server/server.conf  
is\_leader = true  
node\_id\_file = /etc/graylog/server/node-id  
bin\_dir = /usr/share/graylog-server/bin  
data\_dir = /var/lib/graylog-server  
plugin\_dir = /usr/share/graylog-server/plugin  
http\_bind\_address = 192.168.50.106:9000  
http\_enable\_tls = false  
stream\_aware\_field\_types=false  
disabled\_retention\_strategies = none,close  
allow\_leading\_wildcard\_searches = false  
allow\_highlighting = false  
field\_value\_suggestion\_mode = on  
output\_batch\_size = 500  
output\_flush\_interval = 1  
output\_fault\_count\_threshold = 5  
output\_fault\_penalty\_seconds = 30  
processbuffer\_processors = 10  
outputbuffer\_processors = 10  
processor\_wait\_strategy = blocking  
ring\_size = 65536  
inputbuffer\_ring\_size = 65536  
inputbuffer\_wait\_strategy = blocking  
inputbuffer\_processors = 2  
message\_journal\_enabled = true  
message\_journal\_dir = /data/graylog-server/journal  
message\_journal\_max\_age = 72h  
message\_journal\_max\_size = 60gb  
lb\_recognition\_period\_seconds = 3  
mongodb\_uri = mongodb://localhost/graylog  
mongodb\_max\_connections = 1000

/etc/sysconfig/graylog-server  
GRAYLOG\_SERVER\_JAVA\_OPTS=“-Xms48g -Xmx48g -server -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow”  
GRAYLOG\_SERVER\_JAVA\_OPTS=“$GRAYLOG\_SERVER\_JAVA\_OPTS -Djdk.tls.acknowledgeCloseNotify=true -Djavax.net.ssl.trustStore=/etc/graylog/graylog.jks”  
GRAYLOG\_SERVER\_JAVA\_OPTS=“$GRAYLOG\_SERVER\_JAVA\_OPTS -Dlog4j2.formatMsgNoLookups=true”  
GRAYLOG\_SERVER\_ARGS=“”  
GRAYLOG\_COMMAND\_WRAPPER=“”

/etc/graylog/datanode/jvm.options  
-Xms48g  
-Xmx48g  
-XX:+UseG1GC  
-XX:-OmitStackTraceInFastThrow  
-XX:+UnlockExperimentalVMOptions  
-Djdk.tls.acknowledgeCloseNotify=true

**3. What steps have you already taken to try and solve the problem?**

I have tried increasing or decreasing -Xmsg values and also the different buffers but with this configuration i have 82G memory for graylog-datanode.service

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/b/4/b4f795f794df59e3baa14f43c59505b25fd4e2e6.png)

What am i missing or doing wrong here?

Thanks

---

<div class="post-metadata">

**Author:** ![frantz](https://avatars.discourse-cdn.com/v4/letter/f/dbc845/32.png) [@frantz](https://community.graylog.org/u/frantz)\
**Post date:** [October 9, 2025, 12:34pm UTC](https://community.graylog.org/t/memory-consumption-above-configuration-limit/36417/2 "2025-10-09T12:34:33Z")

</div>

-Xmx is for JVM heap size but JVM consumes more memory than heap size : [Google Search](https://www.google.com/search?q=java+consume+more+memory+than+heap+size)

---

<div class="post-metadata">

**Author:** ![Arie](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/arie/32/8094_2.png) [@Arie](https://community.graylog.org/u/Arie)\
**Post date:** [October 10, 2025, 9:06am UTC](https://community.graylog.org/t/memory-consumption-above-configuration-limit/36417/3 "2025-10-10T09:06:22Z")

</div>

> [@ajd](#):
>
> -Xms48g  
> -Xmx48g

This should be max half of present memory and is advised not to go beyond 32GB.

So you should have X nodes with 64GB and java memory configured at 32GB.

Does not mean the other 32GB is not used.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [October 24, 2025, 9:07am UTC](https://community.graylog.org/t/memory-consumption-above-configuration-limit/36417/4 "2025-10-24T09:07:11Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.