i have observed negative unprocessed messages for nodes, what does this mean?
did you checked if that is still present after you had restarted the Graylog nodes? What is the content of the Graylog server.log? Are messages written to the journal?
Yes. after reboot it remain. but unfortunately i have removed the search guard plugin for ES. and after I remove search guard, graylog server cannot read out index set. so i have reinstalled the ES and MongoDB and restore the config for lookup tables and pipleline…
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.