Oh and I noticed I left out the versions of the software, doh.

Graylog 0.20.6(web and server)
ES 0.90.10

Regards
Johan

On Tuesday, August 19, 2014 2:29:48 PM UTC+2, sun...@sunner.com wrote:
>
> Hello,
>
> We have a pair of GL nodes with a cluster of three ES servers at the 
> backend. The occasional capacity problem aside this has been working fine 
> for the most part.
> Today one of the GL nodes decided to act up though, it's behavior is 
> pretty strange:
>
> The process is up, I can connect to it via JMX.
> It doesn't reply to any API calls, so as far as the web interface is 
> concerned it's dead. It still listens on the relevant ports, it just reply 
> to curl for example, or the web interface.
> Checking with JMX, the process keeps eating and GC'ing memory, very slowly 
> increasing the memory usage pattern. Negligible CPU use. 
> I can still see GL as a client node in the ES cluster.
>
> I can see nothing suspicious about the process or the machine it's running 
> on, it's a physical server and there doesn't appear to be any hardware 
> errors or such. One of the ES nodes is running on the same server without 
> issue.
> The config is exactly the same on the other GL server, same hardware and 
> running both GL and ES without issue.
>
> The graylog2-server.log file has quite a few of these lines(along with a 
> stack trace):
> 2014-08-19 13:03:13,628 ERROR: 
> org.graylog2.jersey.container.netty.NettyContainer - Uncaught exception 
> during jersey resource handling
> java.nio.channels.ClosedChannelException
> 2014-08-19 13:03:13,628 INFO : 
> org.graylog2.jersey.container.netty.NettyContainer - Not writing any 
> response, channel is already closed.
> java.nio.channels.ClosedChannelException
>
> I've looked through the other boxes, and aside from the other node being 
> pretty heavily loaded since it has to deal with the entire load, I can't 
> find anything apparently wrong.
>
> The setup is all Debian 7/amd64, running Sun JDK 7u67, and Graylog has a 
> 12 GB heap size configured.
>
> Any tips?
>
> Regards
> Johan
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to