haha, thanks for those nice words :)

It looks like your setup is completely overloaded. Can you check the
IO, CPU and RAM usage?

On Wed, Apr 16, 2014 at 11:40 AM, Robson Eisinger <[email protected]> wrote:
> Hi guys, my first post here and yeah, I need some help, but first I want to
> say something positive about Graylog2: this piece of shit is amazing, is
> fast and reliable to find and cross information on our logs. =)
>
> In our installation, we are using the latest release of Graylog2 (v0.20.1),
> without graylog2-radio, just elasticsearch, the web interface and the
> graylog2-server (with mongo db).
>
> That said, we are having problem when we are forced to restart graylog,
> after a burst of information from one of our log sources (an email server).
> Basically, when one of our user account is compromised, the spammer sent a
> huge amount of messages and that generate a equally huge amount of logs
> entries and the graylog2 can't handle all the incoming data:
>
> 2014-03-31 00:00:04,177 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [1] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,179 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [1] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,202 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [1] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,210 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [1] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,217 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [1] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,217 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [2] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,222 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [1] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,224 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher than the limit (5000000). Pointing
> deflector to new index now!
> 2014-03-31 00:00:04,224 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-03-31 00:00:04,224 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-03-31 00:00:04,224 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-03-31 00:00:04,229 ERROR: org.graylog2.indexer.Indexer - Failed to
> index [1] messages. Please check the index error log in your web interface
> for the reason.
> 2014-03-31 00:00:04,233 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
>
> Those log lines above goes until the next day when we restarted the server.
> Following the logs entries after we restarted. Notice that:  Index
> [logstash_3] is empty. Not calculating ranges.
>
> And GL2 consider only the logstash_8, to be honest, I'm kinda of lost here,
> for some reason GL2 lost the indexes from logstash 3 to 7, disk space wasn't
> the problem, my best guess is related to IO load, but we restarted after we
> mitigated the data burst. So thats why I'm here, how can I avoid the data
> wipe or what I'm missing?
>
> The rest of the log, a few lines before we restart until the restart process
> is over.
>
> 2014-04-01 09:42:04,230 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:42:05,438 ERROR:
> org.graylog2.rest.resources.system.ClusterResource - Node <undefined> not
> found.
> 2014-04-01 09:42:06,476 ERROR:
> org.graylog2.rest.resources.system.ClusterResource - Node <undefined> not
> found.
> 2014-04-01 09:42:07,515 ERROR:
> org.graylog2.rest.resources.system.ClusterResource - Node <undefined> not
> found.
> 2014-04-01 09:42:08,552 ERROR:
> org.graylog2.rest.resources.system.ClusterResource - Node <undefined> not
> found.
> 2014-04-01 09:42:09,586 ERROR:
> org.graylog2.rest.resources.system.ClusterResource - Node <undefined> not
> found.
> 2014-04-01 09:42:14,223 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher tha
> n the limit (5000000). Pointing deflector to new index now!
> 2014-04-01 09:42:14,223 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:42:14,224 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:42:14,224 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:42:14,229 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:42:24,224 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher tha
> n the limit (5000000). Pointing deflector to new index now!
> 2014-04-01 09:42:24,224 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:42:24,225 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:42:24,225 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:42:24,230 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:42:34,225 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher tha
> n the limit (5000000). Pointing deflector to new index now!
> 2014-04-01 09:42:34,225 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:42:34,226 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:42:34,226 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:42:34,232 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:42:44,224 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher than the limit (5000000). Pointing
> deflector to new index now!
> 2014-04-01 09:42:44,224 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:42:44,225 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:42:44,225 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:42:44,230 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:42:54,225 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher than the limit (5000000). Pointing
> deflector to new index now!
> 2014-04-01 09:42:54,225 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:42:54,226 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:42:54,226 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:42:54,232 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:43:04,225 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher than the limit (5000000). Pointing
> deflector to new index now!
> 2014-04-01 09:43:04,226 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:43:04,227 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:43:04,227 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:43:04,232 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:43:14,224 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher than the limit (5000000). Pointing
> deflector to new index now!
> 2014-04-01 09:43:14,224 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:43:14,224 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:43:14,224 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:43:14,229 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:43:24,225 INFO :
> org.graylog2.periodical.DeflectorManagerThread - Number of messages in
> <logstash_7> (5003723) is higher than the limit (5000000). Pointing
> deflector to new index now!
> 2014-04-01 09:43:24,225 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
>
> ...
>
> 2014-04-01 09:44:34,225 INFO : org.graylog2.indexer.Deflector - Cycling
> deflector to next index now.
> 2014-04-01 09:44:34,225 INFO : org.graylog2.indexer.Deflector - Cycling from
> <logstash_7> to <logstash_8>
> 2014-04-01 09:44:34,225 INFO : org.graylog2.indexer.Deflector - Creating
> index target <logstash_8>...
> 2014-04-01 09:44:34,233 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 09:44:36,071 INFO : org.elasticsearch.node - [logstash-server]
> stopping ...
> 2014-04-01 09:44:36,147 INFO : org.elasticsearch.node - [logstash-server]
> stopped
> 2014-04-01 09:44:36,147 INFO : org.elasticsearch.node - [logstash-server]
> closing ...
> 2014-04-01 09:44:36,197 INFO : org.elasticsearch.node - [logstash-server]
> closed
> 2014-04-01 09:44:38,008 INFO : org.graylog2.Main - Graylog2 0.20.1 starting
> up. (JRE: Oracle Corporation 1.7.0_51 on Linux 2.6.32-5-xen-amd64)
> 2014-04-01 09:44:38,222 INFO : org.graylog2.plugin.system.NodeId - Node ID:
> 96382497-5bc0-4050-8b3e-32ad6a904e04
> 2014-04-01 09:44:38,509 INFO : org.graylog2.buffers.ProcessBuffer -
> Initialized ProcessBuffer with ring size <2048> and wait strategy
> <BlockingWaitStrategy>.
> 2014-04-01 09:44:38,533 INFO : org.graylog2.buffers.OutputBuffer -
> Initialized OutputBuffer with ring size <2048> and wait strategy
> <BlockingWaitStrategy>.
> 2014-04-01 09:44:39,252 INFO : org.elasticsearch.node - [logstash-server]
> version[0.90.10], pid[21641], build[0a5781f/2014-01-10T10:18:37Z]
> 2014-04-01 09:44:39,252 INFO : org.elasticsearch.node - [logstash-server]
> initializing ...
> 2014-04-01 09:44:39,261 INFO : org.elasticsearch.plugins - [logstash-server]
> loaded [], sites []
> 2014-04-01 09:44:41,810 INFO : org.elasticsearch.node - [logstash-server]
> initialized
> 2014-04-01 09:44:41,810 INFO : org.elasticsearch.node - [logstash-server]
> starting ...
> 2014-04-01 09:44:41,912 INFO : org.elasticsearch.transport -
> [logstash-server] bound_address {inet[/0:0:0:0:0:0:0:0:9350]},
> publish_address {inet[/10.100.132.201:9350]}
> 2014-04-01 09:44:44,947 WARN : org.elasticsearch.discovery -
> [logstash-server] waited for 3s and no initial state was set by the
> discovery
> 2014-04-01 09:44:44,947 INFO : org.elasticsearch.discovery -
> [logstash-server] logstash/B0H8B8LRSjig-yXS1AP6TQ
> 2014-04-01 09:44:44,949 INFO : org.elasticsearch.node - [logstash-server]
> started
> 2014-04-01 09:44:45,049 INFO : org.elasticsearch.cluster.service -
> [logstash-server] detected_master
> [Stallior][0dPXWC1mSseAjomDbnSSVA][inet[/10.100.132.201:9300]], added
> {[Stallior][0dPXWC1mSseAjomDbnSSVA][inet[/10.100.132.201:9300]],}, reason:
> zen-disco-receive(from master
> [[Stallior][0dPXWC1mSseAjomDbnSSVA][inet[/10.100.132.201:9300]]])
> 2014-04-01 09:44:45,103 INFO : org.graylog2.Core - Setting up deflector.
> 2014-04-01 09:44:45,108 INFO : org.graylog2.indexer.Deflector - Found
> deflector alias <graylog2_deflector>. Using it.
> 2014-04-01 09:44:45,110 INFO : org.graylog2.initializers.DroolsInitializer -
> Not using rules
> 2014-04-01 09:44:45,110 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.DroolsInitializer>.
> 2014-04-01 09:44:45,111 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.HostCounterCacheWriterInitializer>.
> 2014-04-01 09:44:45,112 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.ThroughputCounterInitializer>.
> 2014-04-01 09:44:45,113 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.NodePingInitializer>.
> 2014-04-01 09:44:45,114 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.AlarmScannerInitializer>.
> 2014-04-01 09:44:45,115 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.DeflectorThreadsInitializer>.
> 2014-04-01 09:44:45,116 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.AnonymousInformationCollectorInitializer>.
> 2014-04-01 09:44:45,117 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.IndexRetentionInitializer>.
> 2014-04-01 09:44:45,119 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.MasterCacheWorkersInitializer>.
> 2014-04-01 09:44:45,120 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.ClusterHealthCheckInitializer>.
> 2014-04-01 09:44:45,123 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.StreamThroughputCounterInitializer>.
> 2014-04-01 09:44:45,131 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.VersionCheckInitializer>.
> 2014-04-01 09:44:45,137 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.DeadLetterInitializer>.
> 2014-04-01 09:44:45,137 INFO : org.graylog2.outputs.OutputRegistry -
> Initialized output <org.graylog2.outputs.ElasticSearchOutput>.
> 2014-04-01 09:44:45,145 WARN :
> org.graylog2.periodical.DeflectorManagerThread - Deflector is pointing to
> [logstash_7], not the newest one: [logstash_8]. Re-pointing.
> 2014-04-01 09:44:45,348 INFO : org.graylog2.inputs.InputRegistry - Starting
> [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID
> <5330d1efe4b0c31f9dec9c06>
> 2014-04-01 09:44:45,354 INFO : org.graylog2.inputs.InputRegistry - Starting
> [org.graylog2.inputs.syslog.tcp.SyslogTCPInput] input with ID
> <5330d220e4b0c31f9dec9c3c>
> 2014-04-01 09:44:45,444 INFO : org.graylog2.inputs.syslog.tcp.SyslogTCPInput
> - Started syslog TCP input on /0.0.0.0:22514
> 2014-04-01 09:44:45,448 INFO : org.graylog2.inputs.InputRegistry - Completed
> starting [org.graylog2.inputs.syslog.tcp.SyslogTCPInput] input with ID
> <5330d220e4b0c31f9dec9c3c>
> 2014-04-01 09:44:45,457 INFO : org.graylog2.inputs.syslog.udp.SyslogUDPInput
> - Started syslog UDP input server on /0.0.0.0:514
> 2014-04-01 09:44:45,460 INFO : org.graylog2.inputs.InputRegistry - Completed
> starting [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID
> <5330d1efe4b0c31f9dec9c06>
> 2014-04-01 09:44:45,582 INFO : org.graylog2.Core - Enabling CORS for REST
> API
> 2014-04-01 09:44:47,825 INFO : org.elasticsearch.node - [logstash-server]
> stopping ...
> 2014-04-01 09:44:47,852 INFO : org.elasticsearch.node - [logstash-server]
> stopped
> 2014-04-01 09:44:47,852 INFO : org.elasticsearch.node - [logstash-server]
> closing ...
> 2014-04-01 09:44:47,858 INFO : org.elasticsearch.node - [logstash-server]
> closed
> 2014-04-01 09:45:14,713 INFO : org.graylog2.Main - Graylog2 0.20.1 starting
> up. (JRE: Oracle Corporation 1.7.0_51 on Linux 2.6.32-5-xen-amd64)
> 2014-04-01 09:45:14,805 INFO : org.graylog2.plugin.system.NodeId - Node ID:
> 96382497-5bc0-4050-8b3e-32ad6a904e04
> 2014-04-01 09:45:14,961 INFO : org.graylog2.buffers.ProcessBuffer -
> Initialized ProcessBuffer with ring size <2048> and wait strategy
> <BlockingWaitStrategy>.
> 2014-04-01 09:45:14,982 INFO : org.graylog2.buffers.OutputBuffer -
> Initialized OutputBuffer with ring size <2048> and wait strategy
> <BlockingWaitStrategy>.
> 2014-04-01 09:45:15,434 INFO : org.elasticsearch.node - [logstash-server]
> version[0.90.10], pid[22119], build[0a5781f/2014-01-10T10:18:37Z]
> 2014-04-01 09:45:15,434 INFO : org.elasticsearch.node - [logstash-server]
> initializing ...
> 2014-04-01 09:45:15,441 INFO : org.elasticsearch.plugins - [logstash-server]
> loaded [], sites []
> 2014-04-01 09:45:17,319 INFO : org.elasticsearch.node - [logstash-server]
> initialized
> 2014-04-01 09:45:17,319 INFO : org.elasticsearch.node - [logstash-server]
> starting ...
> 2014-04-01 09:45:17,406 INFO : org.elasticsearch.transport -
> [logstash-server] bound_address {inet[/0:0:0:0:0:0:0:0:9350]},
> publish_address {inet[/10.100.132.201:9350]}
> 2014-04-01 09:45:20,424 WARN : org.elasticsearch.discovery -
> [logstash-server] waited for 3s and no initial state was set by the
> discovery
> 2014-04-01 09:45:20,424 INFO : org.elasticsearch.discovery -
> [logstash-server] logstash/5nHnDOUATWqbhvTgthmAYQ
> 2014-04-01 09:45:20,425 INFO : org.elasticsearch.node - [logstash-server]
> started
> 2014-04-01 09:45:20,522 INFO : org.elasticsearch.cluster.service -
> [logstash-server] detected_master
> [Deathlok][KHn-l_U9TbO7wdEn-N3bwQ][inet[/10.100.132.201:9300]], added
> {[Deathlok][KHn-l_U9TbO7wdEn-N3bwQ][inet[/10.100.132.201:9300]],}, reason:
> zen-disco-receive(from master
> [[Deathlok][KHn-l_U9TbO7wdEn-N3bwQ][inet[/10.100.132.201:9300]]])
> 2014-04-01 09:45:20,582 INFO : org.graylog2.Core - Setting up deflector.
> 2014-04-01 09:45:20,589 INFO : org.graylog2.indexer.Deflector - Found
> deflector alias <graylog2_deflector>. Using it.
> 2014-04-01 09:45:20,591 INFO : org.graylog2.initializers.DroolsInitializer -
> Not using rules
> 2014-04-01 09:45:20,591 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.DroolsInitializ
> er>.
> 2014-04-01 09:45:20,592 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.HostCounterCacheWriterInitializer>.
> 2014-04-01 09:45:20,628 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.ThroughputCounterInitializer>.
> 2014-04-01 09:45:20,629 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.NodePingInitializer>.
> 2014-04-01 09:45:20,631 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.AlarmScannerInitializer>.
> 2014-04-01 09:45:20,632 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.DeflectorThreadsInitializer>.
> 2014-04-01 09:45:20,632 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.AnonymousInformationCollectorInitializer>.
> 2014-04-01 09:45:20,634 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.IndexRetentionInitializer>.
> 2014-04-01 09:45:20,636 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.MasterCacheWorkersInitializer>.
> 2014-04-01 09:45:20,637 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.ClusterHealthCheckInitializer>.
> 2014-04-01 09:45:20,640 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.StreamThroughputCounterInitializer>.
> 2014-04-01 09:45:20,644 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.VersionCheckInitializer>.
> 2014-04-01 09:45:20,647 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.DeadLetterInitializer>.
> 2014-04-01 09:45:20,647 INFO : org.graylog2.outputs.OutputRegistry -
> Initialized output <org.graylog2.outputs.ElasticSearchOutput>.
> 2014-04-01 09:45:20,709 INFO : org.graylog2.inputs.InputRegistry - Starting
> [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID
> <5330d1efe4b0c31f9dec9c06>
> 2014-04-01 09:45:20,714 INFO : org.graylog2.inputs.InputRegistry - Starting
> [org.graylog2.inputs.syslog.tcp.SyslogTCPInput] input with ID
> <5330d220e4b0c31f9dec9c3c>
> 2014-04-01 09:45:20,770 INFO : org.graylog2.inputs.syslog.udp.SyslogUDPInput
> - Started syslog UDP input server on /0.0.0.0:514
> 2014-04-01 09:45:20,772 INFO : org.graylog2.inputs.syslog.tcp.SyslogTCPInput
> - Started syslog TCP input on /0.0.0.0:22514
> 2014-04-01 09:45:20,777 INFO : org.graylog2.inputs.InputRegistry - Completed
> starting [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID
> <5330d1efe4b0c31f9dec9c06>
> 2014-04-01 09:45:20,777 INFO : org.graylog2.inputs.InputRegistry - Completed
> starting [org.graylog2.inputs.syslog.tcp.SyslogTCPInput] input with ID
> <5330d220e4b0c31f9dec9c3c>
> 2014-04-01 09:45:20,819 INFO : org.graylog2.Core - Enabling CORS for REST
> API
> 2014-04-01 09:45:24,047 INFO :
> org.glassfish.jersey.server.ApplicationHandler - Initiating Jersey
> application, version Jersey: 2.5 2013-12-18 14:27:29...
> 2014-04-01 09:45:25,905 INFO : org.graylog2.Core - Started REST API at
> <http://10.100.132.201:12900/>
> 2014-04-01 09:45:25,906 INFO : org.graylog2.Main - Graylog2 up and running.
> 2014-04-01 09:46:12,708 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Enabling
> session validation scheduler...
> 2014-04-01 09:46:53,586 INFO : org.graylog2.system.jobs.SystemJobManager -
> Submitted SystemJob <b39ee010-b99b-11e3-858f-02003d780015>
> [org.graylog2.indexer.ranges.RebuildIndexRangesJob]
> 2014-04-01 09:46:53,586 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Re-calculating index
> ranges.
> 2014-04-01 09:46:53,609 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Index [logstash_3] is
> empty. Not calculating ranges.
> 2014-04-01 09:46:53,611 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Index [logstash_4] is
> empty. Not calculating ranges.
> 2014-04-01 09:46:53,614 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Index [logstash_5] is
> empty. Not calculating ranges.
> 2014-04-01 09:46:53,615 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Index [logstash_0] is
> empty. Not calculating ranges.
> 2014-04-01 09:46:53,616 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Index [logstash_6] is
> empty. Not calculating ranges.
> 2014-04-01 09:46:53,618 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Index [logstash_7] is
> empty. Not calculating ranges.
> 2014-04-01 09:46:53,662 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Calculated range of
> [logstash_8] in [44ms].
> 2014-04-01 09:46:53,663 INFO :
> org.graylog2.indexer.ranges.RebuildIndexRangesJob - Done calculating index
> ranges for 7 indices. Took 73ms.
> 2014-04-01 09:46:53,664 INFO : org.graylog2.system.jobs.SystemJobManager -
> SystemJob <b39ee010-b99b-11e3-858f-02003d780015>
> [org.graylog2.indexer.ranges.RebuildIndexRangesJob] finished in 78ms.
> 2014-04-01 09:48:45,747 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:45,799 ERROR:
> org.graylog2.plugin.rest.AnyExceptionClassMapper - Unhandled exception in
> REST resource
> 2014-04-01 09:48:46,584 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,593 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f6f8d960-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,608 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,612 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f6fca9f0-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,629 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,678 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,682 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7075850-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,682 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7077f60-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,688 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,692 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7090602-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,692 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7092d10-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,692 ERROR: org.graylog2.buffe
>
>
> 2014-04-01 09:48:45,747 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:45,799 ERROR:
> org.graylog2.plugin.rest.AnyExceptionClassMapper - Unhandled exception in
> REST resource
> 2014-04-01 09:48:46,584 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,593 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f6f8d960-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,608 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,612 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f6fca9f0-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,629 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,678 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,682 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7075850-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,682 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7077f60-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,688 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,692 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7090602-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,692 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7092d10-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,692 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7090600-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,692 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f7090601-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,694 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,699 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f709c950-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,750 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,754 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71254d0-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,810 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,814 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71ba3a1-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,814 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71ba3a0-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,814 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71ba3a2-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,823 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,826 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71d7860-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,827 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:46,827 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71ded90-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,827 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71ded91-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,827 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <f71ded92-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:46,827 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message
>
> 2014-04-01 09:48:56,401 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <fcd14750-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:56,404 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [Blacklister] on message <fcd2cdf1-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:56,404 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [Blacklister] on message <fcd2cdf0-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:56,404 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:56,406 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <fcd2cdf1-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:56,406 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <fcd2cdf0-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:56,485 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:56,487 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [Blacklister] on message <fcdfc640-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:56,487 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:56,490 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [StreamMatcher] on message <fcdfc640-b99b-11e3-858f-02003d780015>:
> 2014-04-01 09:48:56,577 WARN : com.mongodb - emptying DBPortPool to
> /127.0.0.1:27017 b/c of error
> 2014-04-01 09:48:56,579 ERROR:
> org.graylog2.buffers.processors.ProcessBufferProcessor - Could not apply
> filter [Blacklister] on message <fcedd000-b99b-11e3-858f-02003d780015>:
> 2014-04-01 10:03:10,053 INFO : org.elasticsearch.discovery.zen -
> [logstash-server] master_left
> [[Deathlok][KHn-l_U9TbO7wdEn-N3bwQ][inet[/10.100.132.201:9300]]], reason
> [transport disconnected (with verified connect)]
> 2014-04-01 10:03:10,055 WARN : org.elasticsearch.discovery.zen -
> [logstash-server] master_left and no other node elected to become master,
> current nodes:
> {[logstash-server][5nHnDOUATWqbhvTgthmAYQ][inet[/10.100.132.201:9350]]{client=true,
> data=false, master=false},}
> 2014-04-01 10:03:10,055 INFO : org.elasticsearch.cluster.service -
> [logstash-server] removed
> {[Deathlok][KHn-l_U9TbO7wdEn-N3bwQ][inet[/10.100.132.201:9300]],}, reason:
> zen-disco-master_failed
> ([Deathlok][KHn-l_U9TbO7wdEn-N3bwQ][inet[/10.100.132.201:9300]])
> 2014-04-01 10:03:10,055 WARN : org.elasticsearch.transport -
> [logstash-server] Transport response handler not found of id [99079]
> 2014-04-01 10:03:19,950 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
> 2014-04-01 10:03:19,955 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
> 2014-04-01 10:03:19,955 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
> 2014-04-01 10:03:19,965 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
> 2014-04-01 10:03:19,970 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
> 2014-04-01 10:03:19,970 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
> 2014-04-01 10:03:19,973 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
> 2014-04-01 10:03:19,975 WARN :
> org.graylog2.buffers.processors.OutputBufferProcessor - Timeout reached. Not
> waiting any longer for writer threads to complete.
>
>
> 2014-04-01 10:03:20,099 INFO : org.elasticsearch.node - [logstash-server]
> stopping ...
> 2014-04-01 10:03:20,106 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,106 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,106 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,108 ERROR:
> org.graylog2.periodical.DeflectorManagerThread - Couldn't point deflector to
> a new index
> 2014-04-01 10:03:20,108 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,108 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,109 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,109 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,110 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,110 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,126 ERROR:
> org.graylog2.buffers.processors.OutputBufferProcessor - Error in output
> [ElasticSearch Output].
> 2014-04-01 10:03:20,137 INFO : org.elasticsearch.node - [logstash-server]
> stopped
> 2014-04-01 10:03:20,137 INFO : org.elasticsearch.node - [logstash-server]
> closing ...
> 2014-04-01 10:03:20,142 INFO : org.elasticsearch.node - [logstash-server]
> closed
> 2014-04-01 10:03:20,661 INFO : org.graylog2.Main - Graylog2 0.20.1 starting
> up. (JRE: Oracle Corporation 1.7.0_51 on Linux 2.6.32-5-xen-amd64)
> 2014-04-01 10:03:20,754 INFO : org.graylog2.plugin.system.NodeId - Node ID:
> 96382497-5bc0-4050-8b3e-32ad6a904e04
> 2014-04-01 10:03:20,930 INFO : org.graylog2.buffers.ProcessBuffer -
> Initialized ProcessBuffer with ring size <2048> and wait strategy
> <BlockingWaitStrategy>.
> 2014-04-01 10:03:20,950 INFO : org.graylog2.buffers.OutputBuffer -
> Initialized OutputBuffer with ring size <2048> and wait strategy
> <BlockingWaitStrategy>.
> 2014-04-01 10:03:21,397 INFO : org.elasticsearch.node - [logstash-server]
> version[0.90.10], pid[24281], build[0a5781f/2014-01-10T10:18:37Z]
> 2014-04-01 10:03:21,397 INFO : org.elasticsearch.node - [logstash-server]
> initializing ...
> 2014-04-01 10:03:21,404 INFO : org.elasticsearch.plugins - [logstash-server]
> loaded [], sites []
> 2014-04-01 10:03:23,262 INFO : org.elasticsearch.node - [logstash-server]
> initialized
> 2014-04-01 10:03:23,263 INFO : org.elasticsearch.node - [logstash-server]
> starting ...
> 2014-04-01 10:03:23,351 INFO : org.elasticsearch.transport -
> [logstash-server] bound_address {inet[/0:0:0:0:0:0:0:0:9350]},
> publish_address {inet[/10.100.132.201:9350]}
> 2014-04-01 10:03:26,370 WARN : org.elasticsearch.discovery -
> [logstash-server] waited for 3s and no initial state was set by the
> discovery
> 2014-04-01 10:03:26,371 INFO : org.elasticsearch.discovery -
> [logstash-server] logstash/ftB-vgFgTjCn217zJ_gEGA
> 2014-04-01 10:03:26,372 INFO : org.elasticsearch.node - [logstash-server]
> started
> 2014-04-01 10:03:26,489 INFO : org.elasticsearch.cluster.service -
> [logstash-server] detected_master
> [Valinor][-yxQkRmMRYWONOIjXXbcFA][inet[/10.100.132.201:9300]], added
> {[Valinor][-yxQkRmMRYWONOIjXXbcFA][inet[/10.100.132.201:9300]],}, reason:
> zen-disco-receive(from master
> [[Valinor][-yxQkRmMRYWONOIjXXbcFA][inet[/10.100.132.201:9300]]])
> 2014-04-01 10:03:26,539 INFO : org.graylog2.Core - Setting up deflector.
> 2014-04-01 10:03:26,546 INFO : org.graylog2.indexer.Deflector - Found
> deflector alias <graylog2_deflector>. Using it.
> 2014-04-01 10:03:26,548 INFO : org.graylog2.initializers.DroolsInitializer -
> Not using rules
>
> 2014-04-01 10:03:26,539 INFO : org.graylog2.Core - Setting up deflector.
> 2014-04-01 10:03:26,546 INFO : org.graylog2.indexer.Deflector - Found
> deflector alias <graylog2_deflector>. Using it.
> 2014-04-01 10:03:26,548 INFO : org.graylog2.initializers.DroolsInitializer -
> Not using rules
> 2014-04-01 10:03:26,548 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.DroolsInitializer>.
> 2014-04-01 10:03:26,549 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.HostCounterCacheWriterInitializer>.
> 2014-04-01 10:03:26,578 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.ThroughputCounterInitializer>.
> 2014-04-01 10:03:26,580 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.NodePingInitializer>.
> 2014-04-01 10:03:26,583 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.AlarmScannerInitializer>.
> 2014-04-01 10:03:26,586 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.DeflectorThreadsInitializer>.
> 2014-04-01 10:03:26,592 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.AnonymousInformationCollectorInitializer>.
> 2014-04-01 10:03:26,598 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.IndexRetentionInitializer>.
> 2014-04-01 10:03:26,603 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.MasterCacheWorkersInitializer>.
> 2014-04-01 10:03:26,604 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.ClusterHealthCheckInitializer>.
> 2014-04-01 10:03:26,606 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer
> <org.graylog2.initializers.StreamThroughputCounterInitializer>.
> 2014-04-01 10:03:26,610 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.VersionCheckInitializer>.
> 2014-04-01 10:03:26,614 INFO : org.graylog2.initializers.Initializers -
> Initialized initializer <org.graylog2.initializers.DeadLetterInitializer>.
> 2014-04-01 10:03:26,615 INFO : org.graylog2.outputs.OutputRegistry -
> Initialized output <org.graylog2.outputs.ElasticSearchOutput>.
> 2014-04-01 10:03:26,673 INFO : org.graylog2.inputs.InputRegistry - Starting
> [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID
> <5330d1efe4b0c31f9dec9c06>
> 2014-04-01 10:03:26,678 INFO : org.graylog2.inputs.InputRegistry - Starting
> [org.graylog2.inputs.syslog.tcp.SyslogTCPInput] input with ID
> <5330d220e4b0c31f9dec9c3c>
> 2014-04-01 10:03:26,734 INFO : org.graylog2.inputs.syslog.udp.SyslogUDPInput
> - Started syslog UDP input server on /0.0.0.0:514
> 2014-04-01 10:03:26,735 INFO : org.graylog2.inputs.syslog.tcp.SyslogTCPInput
> - Started syslog TCP input on /0.0.0.0:22514
> 2014-04-01 10:03:26,742 INFO : org.graylog2.inputs.InputRegistry - Completed
> starting [org.graylog2.inputs.syslog.tcp.SyslogTCPInput] input with ID
> <5330d220e4b0c31f9dec9c3c>
> 2014-04-01 10:03:26,743 INFO : org.graylog2.inputs.InputRegistry - Completed
> starting [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID
> <5330d1efe4b0c31f9dec9c06>
> 2014-04-01 10:03:26,782 INFO : org.graylog2.Core - Enabling CORS for REST
> API
> 2014-04-01 10:03:29,831 INFO :
> org.glassfish.jersey.server.ApplicationHandler - Initiating Jersey
> application, version Jersey: 2.5 2013-12-18 14:27:29...
> 2014-04-01 10:03:31,676 INFO : org.graylog2.Core - Started REST API at
> <http://10.100.132.201:12900/>
> 2014-04-01 10:03:31,677 INFO : org.graylog2.Main - Graylog2 up and running.
> 2014-04-01 10:18:22,696 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Enabling
> session validation scheduler...
> 2014-04-01 11:18:22,697 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
> all active sessions...
> 2014-04-01 11:18:22,704 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
> session validation.  No sessions were stopped.
> 2014-04-01 12:18:22,697 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
> all active sessions...
> 2014-04-01 12:18:22,699 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
> session validation.  No sessions were stopped.
> 2014-04-01 13:18:22,697 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
> all active sessions...
> 2014-04-01 13:18:22,699 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
> session validation.  No sessions were stopped.
> 2014-04-01 14:18:22,697 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
> all active sessions...
> 2014-04-01 14:18:22,700 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
> session validation.  No sessions were stopped.
> 2014-04-01 15:18:22,697 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
> all active sessions...
> 2014-04-01 15:18:22,699 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
> session validation.  No sessions were stopped.
> 2014-04-01 16:18:22,697 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
> all active sessions...
> 2014-04-01 16:18:22,699 INFO :
> org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
> session validation.  No sessions were stopped
>
> --
> You received this message because you are subscribed to the Google Groups
> "graylog2" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to