Unprocessed messages is constantly increasing

[tmacgbay]

Read through this thread for some possibilities - in short some people are seeing malformed GROK lock up processing. This may or may not be the issue but it might be a reasonable place to look…

Graylog nodes stop outputting/fill up buffers

Hi, we have a curios little problem in which one graylog node out of a 3 + 2 Cluster stops outputting messages. filling up the buffers and subsequently the journal. This happens about every other day and can be resolved by a “graceful shutdown” and restart of the node in question. Unfortunately there is nothing in the logs from graylog or elasticsearch that would indicate a problem. Is there additional logging we could enable to get behind this issue or look at other places besides the standa…