I have a Graylog2 Docker installation running on a 16 core, 16 GB memory machine.
GRAYLOG_SERVER_JAVA_OPTS is set to:
“-Xms8g -Xmx8g -XX:NewRatio=1 -XX:MaxMetaspaceSize=256m -server -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow”
I quite often have the problem that Graylog disables streams, showing lines like this in the logs:
ERROR: org.graylog2.streams.StreamFaultManager - Processing of stream <5b716629a7b11b0001c68728> failed to return within 2000ms for more than 3 times. Disabling stream.
From what I understood this could come from too little resources. But my CPU load is only ~4.5 (with 16 cores -> which means that only 1/4 of my cores are utilized).
Is there a way that I can make Graylog use all the available resources?