Output is stopping

Graylog Central (peer support)
1

version:2.4.6
today the default ouput(to Elasticsearch) is stopping, and alert shows:“Journal utilization is too high and may go over the limit soon. Please verify that your Elasticsearch cluster is healthy and fast enough. You may also want to review your Graylog journal settings and set a higher limi” and “Some messages were deleted from the Graylog journal before they could be written to Elasticsearch. Please verify that your Elasticsearch cluster is healthy and fast enough. You may also want to review your Graylog journal settings and set a higher limit” from 2days ago

I checked the cluster of elasticsearch, there is no promblem,just low free memory.

and I checked the log of graylog-server,it shows:

image
image.png1161×407 19.3 KB

2

if Graylog is giving the error message it has issues to connect to Elasticsearch or Elasticserch is not in status green and it needs some love. Either or.

BUT the messages will not disappear - you need to remove them (click on the X) and the status is resolved if they do not return …

But be aware Graylog had issues (see above) and you lost messages

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.