Hi Alejandro, the hardware specs you've mentioned are totally fine. You could probably get along with a quarter of that and still handle some load spikes over the mentioned 300 msg/s.
Please check the logs of your Graylog server for any (error) messages regarding Elasticsearch. Messages do usually only remain in the disk journal, if the indexing backend (i. e. Elasticsearch) isn't available. Cheers, Jochen On Thursday, 14 May 2015 14:56:27 UTC+2, Alejandro Cabrera Obed wrote: > > Dear, I have Graylog last version running as a centralized syslog, > receiving aprox. 300 messages per second from different sources. > > I have CPU x6 and RAM 20 GB, the hardware is enough I suppose. > > The system runs OK, but each 2 or 3 days the message processing is stopped > and the journal increase more and more. In this moment I get these two > warnings: > > Uncomited messages deleted from journal > > Journal utilization is too high > > After that I have to delete all the journal directory and restart the > services. > > How can I solve this problem I have a long time ago??? > > Thanks a lot, > > Alejandro > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
