Hello, I want to optimize my current Graylog for high performance, with the input rate about 4000 - 5000 m/s.
I has changed some configuration but the server still load too high. Below is my updated configuration processbuffer_processors = 30 outputbuffer_processors = 8 When input about 4-5k m/s the output processer of graylog is full and server load too high. Some post suggest to update ring_size value. But I don't know what does it's mean and how to update it to fix with my hardware. ring_size = 65536 inputbuffer_ring_size = 65536 inputbuffer_processors = 2 My hardware: CPU: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz 20M Cache L3 Memory: 64G total -> 32G for ES * Graylog Version: 1.3.3 * Elasticsearch Version: 1.6.1 * MongoDB Version: 3.0.4 * Operating System: SLES 11 Thanks, Phuc Huynh -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/b86e2acb-5ade-4338-a9e9-9a1bd045bc93%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
