Hi Roberto, If you have performance issues with the processing, then you have two choices:
Have a look into your server.conf settings. There are several options to possibly speed up the output performance output_batch_size defaults to 25? If you have thousands of messages in the incoming then the batches are too small outputbuffer_processors .. if you have plenty of idle cpu power raise the value If you still have problems with the output buffer filling up you should have a look at tuning your es cluster for more indexing speed. Then there is the obvious option, do you have enough RAM in your server? Have you raised Xms and Xmx settings for the jvm graylog-server is running in? On RHEL based distributions this can be found in /etc/sysconfig/graylog-server. For example, I have set them to 24G for my setup, be aware of the java compressed pointers and thus you should not raise above 31G. regards, Marcus -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAFRuYVcjSWLi1mKs%3DD9CJj5C41n%2BNXqaL2C2F_dfAbV_v7P%3DKw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
