Hi, I managed to generate new DEBUG & TRACE log file (file is here: http://dimka.ee/foo/gl2-ng.log.gz).
Every ~20 seconds i sent 5 events to Gralog2 raw TCP input with "cat 5.log | nc localhost 4452" command. First time Elasticsearch had 3 events, second time - 7, third - 10, fourth - 12, fifth - 15, sixth - 24(!), seventh - 28. Sixth run seems very strange for me, because during this time i have sent only 5 events, but 9 events were written to Elasticsearch. Seems that some events were buffered somewhere in graylog2. My graylog2 configuration had *output_batch_size = 100*, the rest is default. "*5.log*" file size is 245 bytes, this also seen in logs "Recv network data: 245 bytes via input 'Raw/Plaintext TCP'" MongoDB is 2.2.7. Elasticsearch - 0.90.10. CentOS 6.3 (64bit). If you have some additional advices what should i debug more deeply to solve this issue, i would do it with pleasure :) regards, On Monday, May 5, 2014 10:14:53 PM UTC+3, Dmitri Stoljarov wrote: > > Hi, > > Just downloaded and installed graylog2 v 0.20.2-rc1. > Configuration of graylog2 is default, except mongoDB and some ES settings > (my configuration file: http://dimka.ee/foo/graylog2.conf.txt) > In Graylog2 i do not have any streams, drools or field extractors. Only > thing is set - is RawTCP Gelf input on port 4452. > > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
