I deployed the latest appliance from the ova file. Graylog2 worked fine for several days, but then the journal files grew to 5GB which is the default limit and search returns no current results. On the System page this error appeared:
Journal utilization is too high a few seconds ago Journal utilization is too high and may go over the limit soon. Please verify that your Elasticsearch cluster is healthy and fast enough. You may also want to review your Graylog journal settings and set a higher limit. (Node: 43a9cc82-dc5a-4492-936b-418e1bc98f5e, journal utilization: 96.0%) I increased the journal limit to 10GB but this did not fix the problem. I restarted all services and checked the logs, but could not find any obvious problem. The VM is running on very fast storage with lots of CPU and memory. I set "message_journal_enabled = false" which seems to have temporarily resolved the problem. How do I troubleshoot the journal? All of the other components are working fine. -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
