Hi guys, i’m having plenty of index failures like {"type":"es_rejected_execution_exception","reason":"rejected execution of processing of [1837477][indices:data/write/bulk[s][p]]: request: BulkShardRequest [[firepower_555][1]] containing [259] requests, target allocation id: 3GXnrmVsTh-1SyvC7u2fxQ…

yes you loose messages (IMHO) because it is rejected it looks like your elasticsearch is having to much to work (no threads left)

how do i make room for more threads for elasticsearch?

add move CPUs to elasticsearch … ( just a quick search revealed this https://qbox.io/blog/authoritative-guide-elasticsearch-performance-tuning-part-3 )

More than 80k index failures

Graylog Central (peer support)

mariusgeonea (Mariusgeonea) October 18, 2019, 10:33am 5

i have 1.5 /data node with 10 cpu cores which are not doing anything max they get to 20-30%…

Index Failures: rejected execution of processing

Topic		Replies	Views
Index error and journal filling up on Graylog OVA Graylog Central (peer support)	7	1466	August 9, 2017
Graylog failing to index data Graylog Central (peer support)	12	1572	May 11, 2021
Index Failures: rejected execution of processing Graylog Central (peer support)	1	409	July 27, 2020
Graylog throws bulk errors from several indexes Graylog Central (peer support)	1	1314	March 13, 2019
Index failure because of elasticsearch bulk rejected Graylog Central (peer support)	1	498	September 18, 2019

More than 80k index failures

Related topics