We keep getting the issue of the journal filling with unprocessed messages. I have found the solutions of: Removing and recreating the internal ‘server.log’ text file or fully deleting the ‘journal’ file. What I would like to know is why does this issue keep occurring? It is not viable for us to ha…

What error messages do you see in your logs?

I don’t believe we see anything, however I will have a look again when it goes down next. I will also look into the ElasticSearch logs. Regards, G

Check your ES logs, I just corrected the same thing because ES was getting to many many fields for a single index (1000). Perhaps this can help you. [image] Graylog: ES Log: Limit of total fields [1000] in index [graylog_519] has been exceeded and no longer processing Graylog Centr…

Checked the logs and all I could find was the disk usage was over 85% and then the disk went 100% full. I believe that this was the cause of the issue, I will give it a few hours to ensure we don’t run into this problem again. Regards, G

That will absolutely cause issues. Make sure you have enough space for your journal and ES to be happy or the system will crash.

Unprocessed Messages in Journal

Graylog Central (peer support)

HanSolo71 August 9, 2017, 4:31pm 4

Check your ES logs, I just corrected the same thing because ES was getting to many many fields for a single index (1000). Perhaps this can help you.

Topic		Replies	Views
Journal Contains Unprocessed Messages Graylog Central (peer support)	4	14254	August 9, 2017
Nothing showing in any streams since OS patching Graylog Central (peer support)	7	971	September 23, 2022
Journal contains unprocessed message and New messages are not coming in graylog Graylog Central (peer support)	5	4252	April 19, 2021
Unprocessed messages are currently in the journal Graylog Central (peer support) sidecar , filebeat-linux , filebeat-windows , nosendlogfblx	17	12824	January 12, 2018
Journal Message processing Graylog Central (peer support)	1	968	June 10, 2017

Unprocessed Messages in Journal

Related topics