My graylog 2.6.4 is service stop many time. How can I check and solve problem ?
That fully depends on the cause.
First order of business is to find out what it exactly is that is “stopping”.
And so on… Once you have figured out what is broken, you can start to figure out how to fix it.
Do you start the service manually?
Check you uptime. Are you sure your server doesn’t reboot every time?
Check the graylog’s log.
BOOM! There you go!
Your one active node has >1E6 unprocessed messages. The local buffer/journal is filling up and apparently reaches its breaking point. This means that your connection into ElasticSearch is having problems. Either it’s not working at all, or it’s working part of the time.
Please check the health of your Elastic cluster. On the one hand you’ll find this on System > Overview below the traffic graph. On the other hand you can check Elastic manually or through its logs.
The lifecicle is failed.
Check the graylog’s and elastics’ logs. (As I wrote it before)
You can also check the buffers state under the node.
Could you elaborate on that Macko? I think you mean the general dataflow from source, through Graylog into Elastic, correct? Otherwise, I don’t know what you mean by “lifecycle”.
From @momaydopod 's original picture
HA! I had never seen that word before
and @momaydopod the Graylog server.log will give you addition information.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.