Hello, any 2 or three days I get the following message within graylog2: Processing of a stream has been disabled due to excessive processing time. 16 minutes ago The processing of stream *SVP* has taken too long for 0 times. To protect the stability of message processing, this stream has been disabled. Please correct the stream rules and reenable the stream.
Corresponding to this I see something like this in graylog2-server.log 2014-08-29 09:09:20,795 WARN : org.graylog2.streams.StreamRouter - Processing of stream <53e238930cf22c9d5ed90244> failed to return within 2000ms. I have some questions on this a) what is the reason for this or the other way round: does the detection of long processing time depend on message size? (We sometimes have messages with some MegaByte of payload, of course analasis takes some time...) b) is there a way to increase the limit to e.g. 10000 ms? c) is there a way to skip only messages with problems - and resume the stream with the next message - or at least e.g. within the next minute? Today I have to observe the error - and resume the stream by hand - and the resume was successful anytime... Regards Cornelius -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
