Hello, Where can I find some configuration on output/process/input buffer processors? I am running version 1.3.4 on 4 graylog nodes and using 8 vCPU each. The problem is that Process Buffer is at 100% and the graylog java process is using allt the CPU. The messages are gathering in Disk Journa…

you could first try hints in this thread: https://community.graylog.org/t/graylog-cluster-buffer-process-100-stop-process-messages/1032/1

My elasticsearch cluster resides on different machines. I do not have significant load on elasticssearch cluster. I think if the elasticsearch experience issue ingesting data I could see it in load or in graylog output buffer usage, but is not the case. I think I need more cpu power or more graylog…

Did you already check your extractors, as suggested in the thread I linked?

@jtkarvo and @cantipop . Thanks for ALL helps. My real problem has a extractor. I made a Cluster with 5 graylog servers and 3 elasticserach nodes to balance the devices of my network (almost 200 devices, 55K messages per minute). And by elimination, discover one extractor thats stuck the process buf…

I had this same problem too. Hence I followed an orientation I found in a group on the internet to install the ntp package to synchronize the clocks of my servers. My graylog server and two elasticsearch servers. After that, I had no problem with the full Process Buffer.

That is the reason why out multinode guide recommends exactly that: http://docs.graylog.org/en/2.4/pages/configuration/multinode_setup.html#prerequisites We highly recommend that the system time on all systems is kept in sync via NTP or a similar mechanism. Needless to say that DNS resolution mus…

Processors buffer configuration, process buffer 100%

Graylog Central (peer support)

Topic		Replies	Views
Status Green, all systems go. How to optimize? Graylog Central (peer support)	15	5033	August 25, 2017
Process Buffer Flooding 100% process Graylog Central (peer support)	7	4854	April 23, 2020
Process Buffer - Output Buffer Full Graylog Central (peer support)	4	6750	September 8, 2020
Process and output buffers are full Graylog Central (peer support)	18	10235	November 16, 2020
Graylog Cluster, Buffer process 100% stop process messages Graylog Central (peer support)	22	17208	November 28, 2018

Processors buffer configuration, process buffer 100%

Related topics