Stream Rules causing pauses?


(Matt) #1

Just ran into this. Wondering if it is common or a know condition/issue. All was fine with all of my streams. No issues with them causing any problems. But once I added a 3rd identical graylog node everything went fine. Only problem is now I have streams randomly turning themselves off all the time. Kind of frustrating. Some Regex yes. But had no problems with just two nodes. Wondering why just adding a 3rd node would cause stream processing issues? I would expect it to help as now the load is lower per node and much more balanced. Also. If I fail back to just two nodes the problem goes away. Any insight? On another smaller issue. In a “contains” rule is there a way to make it case insensitive or am I stuck with regex or two contains rules?


(system) #2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.