Hello, My graylog crash this weekend (I can’t find cause on log, nothing interesting in logs)
Problem was no log was stored in graylog since last friday 17’pm.
My problem is journal didn’t work.
After restart graylog/ES/mongo, no processing new messages, and no processing old messages from journal.
I tryed to delete .lock after stopping it, but same.
Finaly, I had to remove my /var/lib/graylog2/journal to process new messages again, and list my weekend data.
How may I prevent this lost ?
I’m on Graylog 3.3.3