Hi Arief, the output_batch_size <https://github.com/Graylog2/graylog2-server/blob/2.0.3/misc/graylog.conf#L274-L279> and output_flush_interval <https://github.com/Graylog2/graylog2-server/blob/2.0.3/misc/graylog.conf#L281-L284> settings can be configured in Graylog's configuration file, and refresh_interval <https://www.elastic.co/guide/en/elasticsearch/guide/2.x/near-real-time.html#refresh-api> has to be set in your Elasticsearch configuration file or as part of a custom index template (see http://docs.graylog.org/en/2.0/pages/configuration/elasticsearch.html#custom-index-mappings for details). The refresh_interval setting should not be tampered with unless you know what you're doing™. ;-)
All of those settings have direct effect on how fast you will "see" freshly ingested logs in Graylog. Cheers, Jochen On Thursday, 14 July 2016 05:22:33 UTC+2, Arief Hydayat wrote: > > Hi Jochen, > > I see.. OK noted. I've increase the: > - 4 vCPU to 6 vCPU, > - 8GM Memory to 12GB Memory > > Those setting is under /opt/graylog/conf/graylog.conf file? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ccdb68f4-29d7-44d2-b32f-cbf2da42f30a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
