Hi Anders, you can disable the time range calculation for all indices with the *disable_index_range_calculation* ( https://github.com/Graylog2/graylog2-server/blob/0.92.4/misc/graylog2.conf#L340-344) setting in your graylog2.conf.
As for the indices you could also use the time-based retention policy to rotate indices with a certain age, i. e. daily ( https://github.com/Graylog2/graylog2-server/blob/0.92.4/misc/graylog2.conf#L78-84 ). Cheers, Jochen On Monday, 2 February 2015 13:54:16 UTC+1, anders larsson wrote: > > Hi we got a setup of LB > graylog > ES > mongodb > > > but i wonder how is the best setup when i need to stor 30 days of logs.. > we got 8Tb disk and i have done calulation of 450 Indices that covers it > for us right now. > EPS is average of 10k messages per second. > but the index recalculation takes very long time when i have 450 indices. > i read that we can do a settings that nog recalculate every indices but > that can cause porblem. > > i dont think 10k EPS on 2 graylog servers is much.. > > servers are 96Gb ram and quad core cpu. and Hitachi SAN disks. > > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
