# Settings in /etc/default/graylog-server are not applied
**URL:** https://community.graylog.org/t/settings-in-etc-default-graylog-server-are-not-applied/34205
**Category:** Graylog Central (peer support)
**Created:** [November 18, 2024, 10:08am UTC](https://community.graylog.org/t/settings-in-etc-default-graylog-server-are-not-applied/34205 "2024-11-18T10:08:06Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@networklord](https://community.graylog.org/u/networklord)
#### Post date: [November 18, 2024, 10:08am UTC](https://community.graylog.org/t/settings-in-etc-default-graylog-server-are-not-applied/34205/1 "2024-11-18T10:08:06Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
**Don’t forget to select tags to help index your topic!**
**1. Describe your incident:**
Settings in /etc/default/graylog-server are not applied
**2. Describe your environment:**
- OS Information: Ubuntu 22.04
- Package Version: Graylog 6.0.6+4aa664f
- Service logs, configurations, and environment variables:
root@graylog:/etc/graylog/server# cat /etc/default/graylog-server
# Path to a custom java executable. By default the java executable of the
# bundled JVM is used.
#JAVA=/usr/bin/java
# Default Java options for heap and garbage collection.
GRAYLOG\_SERVER\_JAVA\_OPTS=“-Xms4g -Xmx4g -server -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow”
# Avoid endless loop with some TLSv1.3 implementations.
GRAYLOG\_SERVER\_JAVA\_OPTS=“$GRAYLOG\_SERVER\_JAVA\_OPTS -Djdk.tls.acknowledgeCloseNotify=true”
# Fix for log4j CVE-2021-44228
GRAYLOG\_SERVER\_JAVA\_OPTS=“$GRAYLOG\_SERVER\_JAVA\_OPTS -Dlog4j2.formatMsgNoLookups=true”
GRAYLOG\_SERVER\_JAVA\_OPTS=“-Djavax.net.ssl.trustStore=/etc/ssl/certs/java/cacerts”
# Pass some extra args to graylog-server. (i.e. “-d” to enable debug mode)
GRAYLOG\_SERVER\_ARGS=“”
# Program that will be used to wrap the graylog-server command. Useful to
# support programs like authbind.
GRAYLOG\_COMMAND\_WRAPPER=“”
**3. What steps have you already taken to try and solve the problem?**
Changed JVM options, restarted graylog-server service
**4. How can the community help?**
**Helpful Posting Tips:** [Tips for Posting Questions that Get Answers](https://community.graylog.org/t/tips-for-posting-questions-that-get-answers/21828) [Hold down CTRL and link on link to open tips documents in a separate tab]
---
### Author:  [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)
#### Post date: [November 18, 2024, 4:26pm UTC](https://community.graylog.org/t/settings-in-etc-default-graylog-server-are-not-applied/34205/2 "2024-11-18T16:26:57Z")
What setting are you setting in `/etc/default/graylog-server` that does not apply? its difficult to tell with the formatting. If you do paste your existing `/etc/default/graylog-server` file can you enclose in a code block?
For example:
```
code
```
I think you are saying you set `-Xms4g -Xmx4g` but your graylog node still only shows 1g heap? Can you paste in a code block?
EDIT: i think whats happening is this line `GRAYLOG_SERVER_JAVA_OPTS=“-Djavax.net.ssl.trustStore=/etc/ssl/certs/java/cacerts”` is overwriting the existing contents of `GRAYLOG_SERVER_JAVA_OPTS`. Note previous lines look like:
```auto
GRAYLOG_SERVER_JAVA_OPTS=“$GRAYLOG_SERVER_JAVA_OPTS -Djdk.tls.acknowledgeCloseNotify=true”
```
Which is appending new text to the existing variable.
---
### Author:  [@networklord](https://community.graylog.org/u/networklord)
#### Post date: [November 19, 2024, 1:07pm UTC](https://community.graylog.org/t/settings-in-etc-default-graylog-server-are-not-applied/34205/3 "2024-11-19T13:07:38Z")
```auto
root@graylog:/etc/default# cat graylog-server
# Path to a custom java executable. By default the java executable of the
# bundled JVM is used.
#JAVA=/usr/bin/java
# Default Java options for heap and garbage collection.
GRAYLOG_SERVER_JAVA_OPTS="-Xms4g -Xmx4g -server -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow"
# Avoid endless loop with some TLSv1.3 implementations.
GRAYLOG_SERVER_JAVA_OPTS="$GRAYLOG_SERVER_JAVA_OPTS -Djdk.tls.acknowledgeCloseNotify=true"
# Fix for log4j CVE-2021-44228
GRAYLOG_SERVER_JAVA_OPTS="$GRAYLOG_SERVER_JAVA_OPTS -Dlog4j2.formatMsgNoLookups=true"
GRAYLOG_SERVER_JAVA_OPTS="-Djavax.net.ssl.trustStore=/etc/ssl/certs/java/cacerts"
# Pass some extra args to graylog-server. (i.e. "-d" to enable debug mode)
GRAYLOG_SERVER_ARGS=""
# Program that will be used to wrap the graylog-server command. Useful to
# support programs like authbind.
GRAYLOG_COMMAND_WRAPPER=""
```
---
### Author:  [@networklord](https://community.graylog.org/u/networklord)
#### Post date: [November 19, 2024, 1:15pm UTC](https://community.graylog.org/t/settings-in-etc-default-graylog-server-are-not-applied/34205/4 "2024-11-19T13:15:49Z")
You are right, I have added like this and it is working
```auto
root@graylog:/etc/default# cat graylog-server
# Path to a custom java executable. By default the java executable of the
# bundled JVM is used.
#JAVA=/usr/bin/java
# Default Java options for heap and garbage collection.
GRAYLOG_SERVER_JAVA_OPTS="-Xms4g -Xmx4g -server -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow"
# Avoid endless loop with some TLSv1.3 implementations.
GRAYLOG_SERVER_JAVA_OPTS="$GRAYLOG_SERVER_JAVA_OPTS -Djdk.tls.acknowledgeCloseNotify=true"
# Fix for log4j CVE-2021-44228
GRAYLOG_SERVER_JAVA_OPTS="$GRAYLOG_SERVER_JAVA_OPTS -Dlog4j2.formatMsgNoLookups=true"
**GRAYLOG_SERVER_JAVA_OPTS="$GRAYLOG_SERVER_JAVA_OPTS -Djavax.net.ssl.trustStore=/etc/ssl/certs/java/cacerts"**
# Pass some extra args to graylog-server. (i.e. "-d" to enable debug mode)
GRAYLOG_SERVER_ARGS=""
# Program that will be used to wrap the graylog-server command. Useful to
# support programs like authbind.
GRAYLOG_COMMAND_WRAPPER=""
```
Thanks,
---
### Author:  [@system](https://community.graylog.org/u/system)
#### Post date: [December 3, 2024, 1:16pm UTC](https://community.graylog.org/t/settings-in-etc-default-graylog-server-are-not-applied/34205/5 "2024-12-03T13:16:21Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.